[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 79.474817] audit: type=1800 audit(1552439708.537:25): pid=10406 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 79.494299] audit: type=1800 audit(1552439708.547:26): pid=10406 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 79.514023] audit: type=1800 audit(1552439708.557:27): pid=10406 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.137' (ECDSA) to the list of known hosts. 2019/03/13 01:15:22 fuzzer started 2019/03/13 01:15:27 dialing manager at 10.128.0.26:42025 2019/03/13 01:15:27 syscalls: 1 2019/03/13 01:15:27 code coverage: enabled 2019/03/13 01:15:27 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/03/13 01:15:27 extra coverage: extra coverage is not supported by the kernel 2019/03/13 01:15:27 setuid sandbox: enabled 2019/03/13 01:15:27 namespace sandbox: enabled 2019/03/13 01:15:27 Android sandbox: /sys/fs/selinux/policy does not exist 2019/03/13 01:15:27 fault injection: enabled 2019/03/13 01:15:27 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/03/13 01:15:27 net packet injection: enabled 2019/03/13 01:15:27 net device setup: enabled 01:17:44 executing program 0: syzkaller login: [ 235.752484] IPVS: ftp: loaded support on port[0] = 21 [ 235.892168] chnl_net:caif_netlink_parms(): no params data found [ 235.956672] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.963333] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.971728] device bridge_slave_0 entered promiscuous mode [ 235.982105] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.988591] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.996975] device bridge_slave_1 entered promiscuous mode [ 236.029963] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 236.041406] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 236.072834] team0: Port device team_slave_0 added [ 236.081873] team0: Port device team_slave_1 added [ 236.266484] device hsr_slave_0 entered promiscuous mode [ 236.402443] device hsr_slave_1 entered promiscuous mode [ 236.682191] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.688811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.696014] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.702550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.781174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.799865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 236.811115] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.820789] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.831344] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 236.850495] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.868319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.877233] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.883814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.932646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 236.941370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 236.949946] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.956477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.964251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 236.973604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 236.982707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 236.991708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 237.000389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 237.009555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 237.018388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 237.026822] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 237.035295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 237.044039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 237.056920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 237.064903] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 237.105635] 8021q: adding VLAN 0 to HW filter on device batadv0 01:17:46 executing program 0: 01:17:46 executing program 0: 01:17:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000014000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, 0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, 0x0) [ 237.451004] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 237.593350] kvm: emulating exchange as write 01:17:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fda000/0x18000)=nil, 0x0, 0x0, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:17:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) 01:17:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) 01:17:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) 01:17:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) 01:17:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:17:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:17:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:17:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:17:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:17:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:17:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:17:48 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0x80000, 0x180) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x7f}, 0x4) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x1, 0x2000) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x101, @local, 0x2}, {0xa, 0x4e22, 0x6ede, @rand_addr="ad68d2c800c2b02430543d2636c20426", 0x2}, 0x7, [0x8, 0x1, 0x0, 0x9, 0x8000, 0x3, 0xa0, 0x4]}, 0x5c) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000140)=0x13) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x124, r2, 0x438, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xf}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lapb0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4ef311de}]}, 0x124}, 0x1, 0x0, 0x0, 0x20000811}, 0x800) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f00000003c0)={0xffffffffffffffde, 0x4, 0x2, 0x100}) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000400)=""/231) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000500)={@dev={0xac, 0x14, 0x14, 0x16}, @multicast2}, 0x8) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000540)={0x3, 0xffffffffffffff9c}) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000580)=""/4096, &(0x7f0000001580)=0x1000) readlinkat(r1, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)=""/8, 0x8) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000001640), &(0x7f0000001680)=0x4) ioctl$UI_DEV_CREATE(r0, 0x5501) bind$netlink(r1, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfe, 0x200000}, 0xc) r3 = add_key(&(0x7f0000001700)='user\x00', &(0x7f0000001740)={'syz', 0x2}, &(0x7f0000001780)="e3ecde0800ebdd1a7b736a4ae0cf0fe0eca92e3e833f0df0ab2d58875388f7abe0a5d291", 0x24, 0xfffffffffffffffa) keyctl$assume_authority(0x10, r3) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/rtc0\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000001800)={0x4000000, 0xaf7e, 0x2}) write$FUSE_DIRENT(r0, &(0x7f0000001840)={0x80, 0x0, 0x6, [{0x3, 0x8, 0x15, 0x20, ',/!\\posix_acl_access^'}, {0x6, 0x9125, 0x5, 0x10001, 'user\x00'}, {0x1, 0x40, 0x6, 0x7fff, 'lapb0\x00'}]}, 0x80) recvfrom$inet(r0, &(0x7f00000018c0)=""/253, 0xfd, 0x2000, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000019c0)) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000001a00)={0x0, 0x2, 0xce22}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000001a40), &(0x7f0000001a80)=0x4) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000001ac0), &(0x7f0000001b00)=0x4) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000001b40), &(0x7f0000001b80)) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000001bc0)={0x0, 0x0, 0x2080}) 01:17:48 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 01:17:48 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 01:17:48 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 239.885612] IPVS: ftp: loaded support on port[0] = 21 01:17:49 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 240.061876] chnl_net:caif_netlink_parms(): no params data found 01:17:49 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 240.143854] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.150383] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.158819] device bridge_slave_0 entered promiscuous mode [ 240.170418] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.176980] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.185429] device bridge_slave_1 entered promiscuous mode [ 240.218574] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 240.232577] bond0: Enslaving bond_slave_1 as an active interface with an up link 01:17:49 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 240.276312] team0: Port device team_slave_0 added [ 240.285397] team0: Port device team_slave_1 added 01:17:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 240.376591] device hsr_slave_0 entered promiscuous mode [ 240.422487] device hsr_slave_1 entered promiscuous mode 01:17:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 240.490993] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.497651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.505012] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.511550] bridge0: port 1(bridge_slave_0) entered forwarding state 01:17:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 240.616572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.637506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 240.657399] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.681505] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.702719] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 01:17:49 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 240.740484] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.787401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.796131] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.802720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.871188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.879757] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.886614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.896251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.905408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.914117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 01:17:50 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 240.943576] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 240.952592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 240.965561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 241.024232] 8021q: adding VLAN 0 to HW filter on device batadv0 01:17:50 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x127, &(0x7f0000cffff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f800000016000900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff02000000000000000000000000000100000000330000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@flushsa={0x14, 0x1c, 0x30f}, 0x14}}, 0x0) 01:17:50 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 01:17:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:17:50 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000003800)={'vcan0\x00', 0x0}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) epoll_wait(r2, &(0x7f0000000040)=[{}, {}, {}, {}], 0x4, 0x0) connect(r0, &(0x7f0000000140)=@hci={0x1f, r1}, 0x67) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000009b32812c3e35e7ac70bd7400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009b5117f117e9a7f4"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x1, 0x10, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "3866cd5576c01aba"}}, 0x48}}, 0x0) 01:17:50 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000003800)={'vcan0\x00', 0x0}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) epoll_wait(r2, &(0x7f0000000040)=[{}, {}, {}, {}], 0x4, 0x0) connect(r0, &(0x7f0000000140)=@hci={0x1f, r1}, 0x67) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000009b32812c3e35e7ac70bd7400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009b5117f117e9a7f4"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x1, 0x10, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "3866cd5576c01aba"}}, 0x48}}, 0x0) 01:17:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:17:50 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x0, @random="a14ab814f78a", 'ip6_vti0\x00'}}, 0xe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x80000000) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x20) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x304, 0x70bd2b, 0x25dfdbff, {{}, 0x0, 0x4, 0x0, {0x8}}, ["", "", "", "", "", ""]}, 0x24}}, 0x8000) ioctl$PPPIOCGMRU(r0, 0x40047452, &(0x7f0000000040)) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x0, &(0x7f0000000100)={0x77, {{0xa, 0x4e21, 0xfffffffffffffffc, @ipv4={[], [], @multicast2}, 0x5}}, {{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x401}}}, 0x108) 01:17:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:17:50 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x10000000080008) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x20300, 0x0) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000080)={0x1, "b216a9bc42a5e2b0b013087ad158c5ee6b46002e9d8b8716f06b8ca8052bca76", 0x3, 0x320, 0x200, 0x81b, 0xe, 0x2, 0x2, 0x5}) 01:17:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:17:51 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x200000, 0x0) read(r0, 0x0, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) 01:17:51 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000240), &(0x7f0000000200)=0x4) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x7fff}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={r1, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xe8}]}, &(0x7f00000001c0)=0x10) 01:17:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:17:51 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000040)) r1 = syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x4, 0x0) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000380)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r2, 0x400, 0x70bd29, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x24000000) r3 = syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000180)={0x2, 0x9, 0x3}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000140)={0x2, 0xfff, &(0x7f0000000100)="1d3e86b0a62268f8f4f90eaf98b49f611b9f7fb79aacb62198", &(0x7f0000000280)="0c76ba0dee170cc74143e782a5e69ae926df2391ea263d7eeecf3449a5c7c0f6ecb8f1e06c151ec4b7e08458f671c2b2e352ae0f753e829cbd72e31a467e4ee8526dec9acd4b285e6515d5591c5f553c", 0x19, 0x50}) dup3(r3, r0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) 01:17:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:17:51 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000040)) r1 = syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x4, 0x0) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000380)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r2, 0x400, 0x70bd29, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x24000000) r3 = syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000180)={0x2, 0x9, 0x3}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000140)={0x2, 0xfff, &(0x7f0000000100)="1d3e86b0a62268f8f4f90eaf98b49f611b9f7fb79aacb62198", &(0x7f0000000280)="0c76ba0dee170cc74143e782a5e69ae926df2391ea263d7eeecf3449a5c7c0f6ecb8f1e06c151ec4b7e08458f671c2b2e352ae0f753e829cbd72e31a467e4ee8526dec9acd4b285e6515d5591c5f553c", 0x19, 0x50}) dup3(r3, r0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) 01:17:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:17:51 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='\x00\x00\x00\x00\x00:=\x973\x13A\x9a]\x89]\x06mwO\xe9]\x87\xfd\xa2\xd2\xa3k\xe5Jc1\x8f=\xf9\xeaB\x96\x9c\x06\x92og9\xf7\x0f\x04%\n\x7f\no\x03\xe3\xbe\xadnp\a\xdc\xd7\xfe\xf9O\xa9\x99\xea\x93\x92\xa2\xe8/&{6\x8a\xc25\xfd\xa2\xfaP\x17\a}\x98\xd2c,\xf4\x0f\xa8%\xa5\xfe\xa8\xbcpO#$\x1by\r\xb8\xfc\x93') ioctl$FICLONE(r0, 0x40049409, r0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 01:17:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:17:51 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x9, 0x3, 0x3, 0x36}) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080)=@int=0x5, 0x4) 01:17:52 executing program 1: r0 = msgget(0x3, 0x8) msgsnd(r0, &(0x7f0000000040)={0x1, "486aa9aeee5b411c332edb54a9561fd08fb43554bd168a5d9aad68ed8a8c39952efe342e454f7166b6caaf7f2e5740d9369f256f1ea891e744b04fc4f9d8a6c4de5d46b7b5b5ffeb918f0ad7168c3f701ef523f7fc3cc735477e2d1d6823d15de6e81c33a03fb1079c6330abc8a19ffcd96ae4d34006619dc2886c3d435e65a333b41eec75323ecb0a2dd742c78eb561071267728cd4a977d9cfa916527a87c5aa3264bbae650a554d9424f64a6afeb594a649afe889"}, 0xbe, 0x800) sendmmsg(0xffffffffffffffff, &(0x7f0000005e00)=[{{&(0x7f0000000600)=@pptp={0x18, 0x2, {0x3, @dev={0xac, 0x14, 0x14, 0x14}}}, 0x80, 0x0, 0x12f, &(0x7f0000000c80), 0xfffffffffffffc4f}, 0x2}], 0x1, 0x4) r1 = msgget$private(0x0, 0x0) msgrcv(r1, &(0x7f0000000000)={0x0, ""/13}, 0x15, 0x2, 0x1000) 01:17:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:17:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:17:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:17:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:17:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:17:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:17:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:17:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000eecdee01050000004903689262a53e8d26102fa57aeb000000060080000000000000001ce6e4a34116c2d84dc5e5fa0f68bc2eaf36aed41fed51e5cb5f421468fef1a7d308be82d5524078a8675211f16205877c28d61a8e3a41501af87bc0bad8804b8677e6727d516c999afd0404b61f0716e40d5aa3f2dbbe43bdeacfcd5e9835abbf3c6bd6dd4076320babede012aa7c126439fe0b5cd814a6c1c5898d6072373fbd7966795c068af090"], 0x1}}, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x200, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000080)=""/95) 01:17:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:17:53 executing program 1: capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a02000000ff81004e227e00000058000b4824ca944f64009400050028925aa8000000000000008000f0ffffffff09000000fff5dd000000090001000a0c0c00fcff0000040e05a5", 0x58}], 0x1) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x101, 0x80) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000040)) [ 244.375704] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure 01:17:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x8000000000000000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3, 0x200000) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f00000001c0)=""/39) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x5}, &(0x7f0000000080)=0x8) ioctl$VIDIOC_S_PRIORITY(r2, 0x40045644, 0x3) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={r3, 0x7fff, 0x10}, &(0x7f0000000140)=0xc) readahead(r2, 0x8, 0x7) dup2(r0, r1) r4 = fcntl$getown(r1, 0x9) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)=0x0) kcmp(r4, r5, 0x6, r2, r1) 01:17:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:17:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:17:53 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000200)={0x0, 0x10001}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000280)=@assoc_id=r2, &(0x7f00000002c0)=0x4) ioctl$TCFLSH(r1, 0x540b, 0x65c677c5) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000180)) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f00000000c0)=0x5) r3 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000001c0)={0x77359400}, 0x10) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x10) ioctl$TIOCSCTTY(r3, 0x540e, 0x6) ioctl(r3, 0xffffffffffffffb8, &(0x7f0000000080)) ioctl$TCFLSH(r0, 0x540b, 0x7fff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x8800, 0x0) 01:17:53 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000200)={0x0, 0x10001}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000280)=@assoc_id=r2, &(0x7f00000002c0)=0x4) ioctl$TCFLSH(r1, 0x540b, 0x65c677c5) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000180)) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f00000000c0)=0x5) r3 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000001c0)={0x77359400}, 0x10) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x10) ioctl$TIOCSCTTY(r3, 0x540e, 0x6) ioctl(r3, 0xffffffffffffffb8, &(0x7f0000000080)) ioctl$TCFLSH(r0, 0x540b, 0x7fff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x8800, 0x0) 01:17:54 executing program 0 (fault-call:4 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:17:54 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7f, 0x8000) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000040)) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000016fe0)={{}, {0x0, 0x5f6c}}, &(0x7f000000ffe0)) timerfd_gettime(r1, &(0x7f00000000c0)) [ 245.046808] FAULT_INJECTION: forcing a failure. [ 245.046808] name failslab, interval 1, probability 0, space 0, times 1 [ 245.058288] CPU: 0 PID: 10800 Comm: syz-executor.0 Not tainted 5.0.0+ #11 [ 245.065277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.074680] Call Trace: [ 245.077355] dump_stack+0x173/0x1d0 [ 245.081032] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 245.086280] should_fail+0xa19/0xb20 [ 245.090061] __should_failslab+0x278/0x2a0 [ 245.094374] should_failslab+0x29/0x70 [ 245.098427] kmem_cache_alloc+0xff/0xb60 [ 245.102564] ? mmu_topup_memory_caches+0x119/0x920 [ 245.107550] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 245.112816] mmu_topup_memory_caches+0x119/0x920 [ 245.117658] ? kvm_arch_vcpu_ioctl_run+0x7a91/0x11300 [ 245.122930] kvm_mmu_load+0xb3/0x3650 [ 245.126796] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 245.132033] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 245.137315] kvm_arch_vcpu_ioctl_run+0x7a91/0x11300 [ 245.142661] ? update_load_avg+0x11b5/0x1a90 01:17:54 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1e"], 0x1}}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000080)) [ 245.147132] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 245.152368] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 245.157986] ? kstrtoull+0x76e/0x7e0 [ 245.161772] ? __msan_poison_alloca+0x1f0/0x2a0 [ 245.166512] ? put_pid+0x4a/0x260 [ 245.170014] ? kvm_vcpu_ioctl+0x1d11/0x1d20 [ 245.174404] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 245.179673] kvm_vcpu_ioctl+0xfe9/0x1d20 [ 245.183892] ? kvm_vm_release+0x90/0x90 [ 245.187931] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 245.193176] ? kvm_vm_release+0x90/0x90 [ 245.197224] do_vfs_ioctl+0xebd/0x2bf0 [ 245.201195] ? security_file_ioctl+0x92/0x200 [ 245.205765] __se_sys_ioctl+0x1da/0x270 [ 245.209797] __x64_sys_ioctl+0x4a/0x70 [ 245.213741] do_syscall_64+0xbc/0xf0 [ 245.217532] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 245.222776] RIP: 0033:0x457f29 [ 245.226016] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 245.244976] RSP: 002b:00007fe3340bbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 245.252759] RAX: ffffffffffffffda RBX: 00007fe3340bbc90 RCX: 0000000000457f29 [ 245.260087] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 245.267419] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 245.274755] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe3340bc6d4 [ 245.282068] R13: 00000000004c0e61 R14: 00000000004d2cb8 R15: 0000000000000006 01:17:54 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4000000000000024, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x40000400107ff) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000017c0)=ANY=[@ANYBLOB="9c0000144a22c700baa33400c91891129be022d934c8f3612c17f01eb01af05d15e1187b76721ef29cb2500bdd21ce70105011e27b5061c182c8b50c93b2ad98df78fa63622d284d246485fb4091cd362350b1adb9a62be25e9b2b7a0db5d4647e08e3428dfacb6045cf6e6f30f26e02e81b", @ANYRES16=r1, @ANYBLOB="020027bd7000fbdbdf25050000000c00060008000100000000003800010034000200080001001f00000008000400060000000800020000000000080001001100000008000300050000000800040002000000440004002c000700080004004000000008000400040000000800040009000000080001000200000008000400800000001400010062726f616463617374926c696e6b0000"], 0x9c}, 0x1, 0x0, 0x0, 0x40004}, 0x800) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x400, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = eventfd(0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) io_setup(0x92, &(0x7f0000000540)=0x0) io_submit(r6, 0x2, &(0x7f0000001680)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0xcc5, r5, &(0x7f0000000580)="12f5344e8fd91ef255d8b399a7c31f5debe4f94b1a693eeae042a34ee7ddfd2e10c7eabedc71b2d09ff68e9b3051d7f2e4d0eb4704778c897c576ea2fa6fa565e8573797de60bb1c78d93358c759fbdbaacf32eae513742e927c8393c5", 0x5d, 0x3, 0x0, 0x2, r5}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x8, 0xd935, r0, &(0x7f0000000640)="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", 0x1000, 0x1, 0x0, 0x3, 0xffffffffffffff9c}]) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x73, &(0x7f0000000140)=""/116, &(0x7f00000001c0)=0x74) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f00000016c0)=0x6) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r7 = dup3(r3, r3, 0x80000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000001a40)={0x0, 0x100000001}, &(0x7f0000001a80)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000001b40)={r8, 0x5c, &(0x7f0000001ac0)=[@in={0x2, 0x4e23, @rand_addr=0x6}, @in6={0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}]}, &(0x7f0000001b80)=0x10) r9 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/mixer\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400)={0xffffffffffffffff}, 0x117, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r9, &(0x7f0000000480)={0x1, 0x10, 0xfa00, {&(0x7f00000003c0), r10}}, 0x18) close(r2) ioctl$KVM_ASSIGN_PCI_DEVICE(r5, 0x8040ae69, &(0x7f00000004c0)={0x7, 0xcf, 0x5418, 0x1}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x8, 0x401}, &(0x7f0000001740)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000001780)={r11, 0x7}, 0x8) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) close(r0) 01:17:54 executing program 0 (fault-call:4 fault-nth:1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 245.469582] FAULT_INJECTION: forcing a failure. [ 245.469582] name failslab, interval 1, probability 0, space 0, times 0 [ 245.481392] CPU: 1 PID: 10814 Comm: syz-executor.0 Not tainted 5.0.0+ #11 [ 245.488368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.497750] Call Trace: [ 245.500409] dump_stack+0x173/0x1d0 [ 245.504090] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 245.509521] should_fail+0xa19/0xb20 [ 245.513340] __should_failslab+0x278/0x2a0 [ 245.517640] should_failslab+0x29/0x70 [ 245.521586] kmem_cache_alloc+0xff/0xb60 [ 245.525705] ? mmu_topup_memory_caches+0x119/0x920 [ 245.530693] mmu_topup_memory_caches+0x119/0x920 [ 245.535510] kvm_mmu_load+0xb3/0x3650 [ 245.539369] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 245.544613] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 245.549874] kvm_arch_vcpu_ioctl_run+0x7a91/0x11300 [ 245.555367] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 245.560789] ? update_load_avg+0x11b5/0x1a90 [ 245.565268] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 245.570524] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 245.576027] ? kstrtoull+0x76e/0x7e0 [ 245.579796] ? __msan_poison_alloca+0x1f0/0x2a0 [ 245.584614] ? put_pid+0x4a/0x260 [ 245.588110] ? kvm_vcpu_ioctl+0x1d11/0x1d20 [ 245.592485] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 245.597740] kvm_vcpu_ioctl+0xfe9/0x1d20 [ 245.601856] ? kvm_vm_release+0x90/0x90 [ 245.605874] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 245.611216] ? kvm_vm_release+0x90/0x90 [ 245.615253] do_vfs_ioctl+0xebd/0x2bf0 [ 245.619210] ? security_file_ioctl+0x92/0x200 [ 245.623769] __se_sys_ioctl+0x1da/0x270 [ 245.627799] __x64_sys_ioctl+0x4a/0x70 [ 245.631735] do_syscall_64+0xbc/0xf0 [ 245.635506] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 245.640731] RIP: 0033:0x457f29 [ 245.643976] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 245.662933] RSP: 002b:00007fe3340bbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 01:17:54 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x6, 0x9}) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000080)={0x0, {0x7f, 0x7}}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0)=0x9, 0x4) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000100), 0x4) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000140)={{0x3000, 0x4000, 0xb, 0x0, 0x100000000, 0x7, 0x4, 0x9, 0xbb, 0x0, 0x7, 0xff}, {0xf000, 0x7004, 0x0, 0xd2, 0x3, 0x2, 0x7f, 0x80, 0xffffffff00000001, 0x9, 0x5, 0x7ff}, {0xf000, 0x0, 0xc, 0x6, 0xff, 0x6, 0x7, 0x28, 0x2, 0x0, 0x7fffffff, 0x7}, {0x2000, 0xf000, 0x0, 0x3, 0x2, 0x1000, 0x7, 0x5, 0x71af, 0x5, 0x9, 0x1260}, {0xf000, 0x4000, 0xf, 0x7fff, 0x0, 0x7, 0x4, 0x7, 0x7ff, 0x6, 0x97, 0xcaf}, {0x3000, 0x100000, 0x8, 0x8000000, 0x8, 0x7226bbbc, 0x3f, 0x8, 0x3f, 0x8, 0x3, 0x3}, {0x4, 0xf004, 0xf, 0xfade, 0x3809, 0x7, 0x2, 0x9, 0x3a, 0x9, 0x8, 0xfffffffffffffffd}, {0x0, 0x1000, 0x0, 0x5, 0x20, 0x3, 0x3, 0x20, 0xffffffff, 0x7, 0x100000000, 0x7}, {0x100002, 0x3000}, {0x16000, 0x100004}, 0x8, 0x0, 0xf000, 0x400604, 0x9, 0x8000, 0xf000, [0x6, 0x3, 0x7a3b, 0x40]}) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x0, {{0x2, 0x4e23, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000003c0)={0x2d8, r1, 0xd30, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffffffffffa2}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffffffff95b3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7257}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfbb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0xa4, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9c1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf27}]}]}, @TIPC_NLA_MEDIA={0xfc, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x33}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffff8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_LINK={0x54, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_LINK={0x2c, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x880}, 0x10) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000740)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)={0x0, r0, 0x3, 0x1}, 0x14) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000007c0)={0x0, 0x0, 0x100}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000800)={0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000840)={r2, r3}) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f0000000880)) r4 = socket$caif_stream(0x25, 0x1, 0x5) r5 = syz_open_dev$mouse(&(0x7f0000000c80)='/dev/input/mouse#\x00', 0x2ad2ac0b, 0x20000) syz_open_dev$video(&(0x7f0000000cc0)='/dev/video#\x00', 0x40, 0x48040) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000d00)=""/129) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000e00)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x30, r6, 0x730, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0x4107, 0x0, {0x14, 0x18, {0x9, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", ""]}, 0x30}}, 0x800) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000001100)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000010c0)={&(0x7f0000000f40)={0x148, r1, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xd8, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc18}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff300}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc70}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x24}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40000000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x25f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000001140)=""/90) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f00000011c0)={{0xffffffff}, 0x60}, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001240)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000001380)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001340)={&(0x7f0000001280)={0xac, r7, 0x320, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1000}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x400}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x101}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x479d}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x4) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000013c0)=0x38) setxattr$trusted_overlay_nlink(&(0x7f0000001400)='./file0\x00', &(0x7f0000001440)='trusted.overlay.nlink\x00', &(0x7f0000001480)={'L+', 0x2}, 0x28, 0x1) r8 = semget$private(0x0, 0x4, 0x80) semctl$SEM_INFO(r8, 0x1, 0x13, &(0x7f00000014c0)=""/201) [ 245.670706] RAX: ffffffffffffffda RBX: 00007fe3340bbc90 RCX: 0000000000457f29 [ 245.678021] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 245.685420] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 245.692726] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe3340bc6d4 [ 245.700023] R13: 00000000004c0e61 R14: 00000000004d2cb8 R15: 0000000000000006 01:17:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f00000001c0)="e9be685f98494211c5c38856b94b8c77be7f8213d2868e1def88ff11c5354e9ee808209376c541139d0fd52e1269d57ffb8344fea7e2bd5cd1e86086b157091ef730a99bf8de8cc33ea05015c669f7a995e90d325eb71312314345d6b07427afcbf5ce6dac7f5dfaa18df5b0a0caed70233ed5b7524ad8ce1949c483121188c05028584309c067a4261222e5f8b9af478283957a2ea97bd5ec084a19a52901941cba4bf05e8e4801ce8bd2d35b61d6ac84a2e3da74a117256c3f4f86d4b86b1ebd12c988d0a638eb62781402a1070f0b0a80", 0xd2, 0xfffffffffffffffd) r2 = request_key(&(0x7f0000000300)='cifs.idmap\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)='!posix_acl_access\x00', 0xfffffffffffffffd) keyctl$instantiate(0xc, r1, &(0x7f00000002c0)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'trusted:', 'encrypted\x00', 0x20, 0x9}, 0x37, r2) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/33) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'nodev', 0x20, 0x39}, 0x2c, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) r4 = accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f00000003c0)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000400)={0x0, 0xfffffffffffff97e, 0x20}, &(0x7f0000000440)=0xc) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000480)={r5, 0x67, "f3e39d831d44660535f940c0881d53640a7755aada1c6b8008ec3c6973a465ce73f4bc329b66de954ab242662af276cc360066acdd990f2cc0ed5ed627c9add169525bff893f6e465466ca53d4f2355bb30473af9795e289ba2c99a580b3476f32d51731ff244a"}, &(0x7f0000000500)=0x6f) keyctl$update(0xb, r3, &(0x7f0000000000), 0x6b6b6b00000000) 01:17:54 executing program 0 (fault-call:4 fault-nth:2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 245.944037] encrypted_key: key user:nodev not found [ 245.950490] encrypted_key: keyword 'new' not allowed when called from .update method 01:17:55 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000180)="1c79e1846cfbc578760653a400b018e6544b409646917b31d34fdc80292ff3fe1df02485f72884657702e1326f419ba35d087c4f8cf2bda46ab0d2b55aaf9c00ccf7cd90e69f487aa30ecdd63fa1dfbdbf3471b6772b122f56183eb7c6260b2c8d15c52b4c71ebccafdbb65d99258d4fdbd8077218fb993c6a539fa92f63310427697c2d821625fa42baef4956f0d12e01a60778434492e21b032ed5da3cdaae458e2437d28d0675ad", 0xa9, 0xfffffffffffffff8) r1 = request_key(&(0x7f0000000380)='dns_resolver\x00', &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000400)='veth1_to_bond\x00', 0xfffffffffffffffb) keyctl$instantiate_iov(0x14, r0, &(0x7f00000000c0)=[{&(0x7f0000000240)="f64e4ad2ed3bfa88982bd1b39324c5b1b5f1fdc921419ddc7d1b8279332853eeb99fb1ac566df466cbe941def1ae9faa7718cdcef5bec263eb7415cfc65a091b17a57e3dfd693ee7f776fc22b80fcc938ba7c6e3e7d14045b5dd463f33191a40b7b63cbf459e479050182813c2a0a7a47499da5052e3d6fa62fe6621e8a245a074ba0025d1ff3b640b2b4b156b9c377ac2c73feb8105a5393ba488b61172ac509ab16a5b40609f0f4e1c5c13594adb7d", 0xb0}, {&(0x7f0000000080)="47d24b1ab89053b9672e1b3897957c91bf4d3b5dd56dd62acc7245ba48e9a9cffbe3815912199c989650b0d754edef4daf95cf421cb8ff5bdc8cb4ef0a64", 0x3e}], 0x2, r1) r2 = socket(0x10, 0x802, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@setlink={0x48, 0x13, 0x501, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, [{0x10, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0xc}]}]}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x48}}, 0x1) 01:17:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2000000000) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:17:55 executing program 1: unshare(0x24020400) r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3f, 0x200043) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0xc4}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={r2, @in6={{0xa, 0x4e20, 0x2, @mcast1, 0x81}}, 0x4, 0x8}, 0x90) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8040}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="538cbacee877ae1a", @ANYRES16=r1, @ANYBLOB="000428bd7000fbdbdf250b000000080005000100000008000600010000000800060003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x2, 0xc, 0x6, 0x6, 0x2, 0x0, 0x70bd26, 0x25dfdbfd}, 0x10}}, 0x4080e) 01:17:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000040)="2700000014000707030e000012f10a001100000000000000000042f26f050000078a151f750800", 0x27) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) fsetxattr$security_smack_entry(r0, &(0x7f0000001180)='security.SMACK64EXEC\x00', &(0x7f00000011c0)=']md5sum-,vboxnet0mime_typeuser*@\x00', 0x21, 0x2) recvmmsg(r0, &(0x7f0000002180)=[{{&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/106, 0x6a}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3}, 0x5}], 0x1, 0x0, &(0x7f0000006700)) [ 246.465030] IPVS: ftp: loaded support on port[0] = 21 01:17:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000edffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002fd000db0799ee5308985dd1f1f225ca91d0f8"], 0x68) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 246.705008] chnl_net:caif_netlink_parms(): no params data found 01:17:55 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="020400000a00000000000000000000000300060000886ed000000002000000e000000100000000000000000200010000000000f9ffffffffffffff030005000000000002000000e00000010000000000436d42564f2fd0f6c9482c00000bfa8575c92f9cff23"], 0x50}}, 0x0) [ 246.802822] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.809354] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.817820] device bridge_slave_0 entered promiscuous mode 01:17:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000000)="0fc76d02c4228d97ecf336410f09674a0fc76d980f38cdba0a0000800f20d835080000000f22d8400f01df660f3800ad00300000c422c5b6a02200c0fe460f09", 0x40}], 0x1, 0x8, &(0x7f0000000080), 0x0) [ 246.869742] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.876547] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.885676] device bridge_slave_1 entered promiscuous mode [ 246.934924] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 246.967174] bond0: Enslaving bond_slave_1 as an active interface with an up link 01:17:56 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x2, 0x40000) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000080)) execve(0x0, 0x0, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) epoll_pwait(r0, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0xcecc, &(0x7f0000000240), 0x8) rt_sigsuspend(&(0x7f0000000000)={0x903}, 0x8) lseek(r0, 0x0, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0xd0, &(0x7f0000000680)=[@in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0x6, @empty, 0x8000}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e20, 0x1b3f, @local, 0x7f43}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e22, @rand_addr=0x7}, @in6={0xa, 0x4e20, 0x100000001, @mcast1, 0x200}, @in6={0xa, 0x4e22, 0xfd, @loopback, 0x7f}]}, &(0x7f00000003c0)=0x3) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000400)={r1, 0x7, 0x6, [0x9, 0x0, 0x7f, 0x9, 0x4a, 0x1ff]}, &(0x7f0000000440)=0x14) [ 247.018834] team0: Port device team_slave_0 added [ 247.038118] team0: Port device team_slave_1 added 01:17:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x9, 0x5, 0x14, "8578e98afcc0b649929029224ff9dd712bbf45df665342819a2193eb74967a250507caf056670f9ca5208f612729285ee7ce6d0cc63f72e5b8aaa1728ee66207", "1634936e73af386700c8237e5470b5e6441004aca33c6e631ed305f938165410f54f1ed015c8dadd8adba7fa2746cc9a8958edcf56c6254e75c5fc2bc07aadd1", "480611d72ae54a13886b2cf2e40639b43b40fde60dd3303ec31281a3506b34cb", [0x310, 0x4]}) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 247.148434] device hsr_slave_0 entered promiscuous mode [ 247.194670] device hsr_slave_1 entered promiscuous mode [ 247.249422] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 247.257435] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 247.314797] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.321358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.328561] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.335182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.375615] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 247.383468] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 247.457009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.489442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.506271] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.516534] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.548836] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 247.582681] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.606179] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.615505] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.622128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.656974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.665464] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.672058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.682498] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 247.712202] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 247.722151] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.739254] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 247.748319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 247.757114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 247.766871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 247.799733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.814809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 01:17:57 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x6, 0x9}) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000080)={0x0, {0x7f, 0x7}}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0)=0x9, 0x4) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000100), 0x4) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000140)={{0x3000, 0x4000, 0xb, 0x0, 0x100000000, 0x7, 0x4, 0x9, 0xbb, 0x0, 0x7, 0xff}, {0xf000, 0x7004, 0x0, 0xd2, 0x3, 0x2, 0x7f, 0x80, 0xffffffff00000001, 0x9, 0x5, 0x7ff}, {0xf000, 0x0, 0xc, 0x6, 0xff, 0x6, 0x7, 0x28, 0x2, 0x0, 0x7fffffff, 0x7}, {0x2000, 0xf000, 0x0, 0x3, 0x2, 0x1000, 0x7, 0x5, 0x71af, 0x5, 0x9, 0x1260}, {0xf000, 0x4000, 0xf, 0x7fff, 0x0, 0x7, 0x4, 0x7, 0x7ff, 0x6, 0x97, 0xcaf}, {0x3000, 0x100000, 0x8, 0x8000000, 0x8, 0x7226bbbc, 0x3f, 0x8, 0x3f, 0x8, 0x3, 0x3}, {0x4, 0xf004, 0xf, 0xfade, 0x3809, 0x7, 0x2, 0x9, 0x3a, 0x9, 0x8, 0xfffffffffffffffd}, {0x0, 0x1000, 0x0, 0x5, 0x20, 0x3, 0x3, 0x20, 0xffffffff, 0x7, 0x100000000, 0x7}, {0x100002, 0x3000}, {0x16000, 0x100004}, 0x8, 0x0, 0xf000, 0x400604, 0x9, 0x8000, 0xf000, [0x6, 0x3, 0x7a3b, 0x40]}) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x0, {{0x2, 0x4e23, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000003c0)={0x2d8, r1, 0xd30, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffffffffffa2}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffffffff95b3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7257}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfbb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0xa4, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9c1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf27}]}]}, @TIPC_NLA_MEDIA={0xfc, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x33}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffff8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_LINK={0x54, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_LINK={0x2c, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x880}, 0x10) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000740)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)={0x0, r0, 0x3, 0x1}, 0x14) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000007c0)={0x0, 0x0, 0x100}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000800)={0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000840)={r2, r3}) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f0000000880)) r4 = socket$caif_stream(0x25, 0x1, 0x5) r5 = syz_open_dev$mouse(&(0x7f0000000c80)='/dev/input/mouse#\x00', 0x2ad2ac0b, 0x20000) syz_open_dev$video(&(0x7f0000000cc0)='/dev/video#\x00', 0x40, 0x48040) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000d00)=""/129) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000e00)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x30, r6, 0x730, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0x4107, 0x0, {0x14, 0x18, {0x9, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", ""]}, 0x30}}, 0x800) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000001100)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000010c0)={&(0x7f0000000f40)={0x148, r1, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xd8, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc18}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff300}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc70}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x24}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40000000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x25f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000001140)=""/90) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f00000011c0)={{0xffffffff}, 0x60}, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001240)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000001380)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001340)={&(0x7f0000001280)={0xac, r7, 0x320, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1000}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x400}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x101}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x479d}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x4) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000013c0)=0x38) setxattr$trusted_overlay_nlink(&(0x7f0000001400)='./file0\x00', &(0x7f0000001440)='trusted.overlay.nlink\x00', &(0x7f0000001480)={'L+', 0x2}, 0x28, 0x1) r8 = semget$private(0x0, 0x4, 0x80) semctl$SEM_INFO(r8, 0x1, 0x13, &(0x7f00000014c0)=""/201) 01:17:57 executing program 0: openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x10002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r3) 01:17:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x9, 0x5, 0x14, "8578e98afcc0b649929029224ff9dd712bbf45df665342819a2193eb74967a250507caf056670f9ca5208f612729285ee7ce6d0cc63f72e5b8aaa1728ee66207", "1634936e73af386700c8237e5470b5e6441004aca33c6e631ed305f938165410f54f1ed015c8dadd8adba7fa2746cc9a8958edcf56c6254e75c5fc2bc07aadd1", "480611d72ae54a13886b2cf2e40639b43b40fde60dd3303ec31281a3506b34cb", [0x310, 0x4]}) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 248.040757] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 248.048728] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:17:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x9, 0x5, 0x14, "8578e98afcc0b649929029224ff9dd712bbf45df665342819a2193eb74967a250507caf056670f9ca5208f612729285ee7ce6d0cc63f72e5b8aaa1728ee66207", "1634936e73af386700c8237e5470b5e6441004aca33c6e631ed305f938165410f54f1ed015c8dadd8adba7fa2746cc9a8958edcf56c6254e75c5fc2bc07aadd1", "480611d72ae54a13886b2cf2e40639b43b40fde60dd3303ec31281a3506b34cb", [0x310, 0x4]}) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:17:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) dup2(r0, r0) listen(r0, 0x8000000007) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet6(r1, 0x0, 0x0, 0x20040880, &(0x7f0000000080)={0xa, 0x4004e24, 0xfffffffffffffffc, @loopback}, 0x1c) [ 248.306099] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 248.314097] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:17:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)={0x9, 0x3}) 01:17:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfdfffffffffeffff) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000140)={0x18, 0x1}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000080)={0x7b, 0x600000000000000, [0x17b, 0x3], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) r3 = syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0, 0xff}, &(0x7f00000001c0)=0x8) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000240)={0xffff, 0x0, 0x2, 0x2}) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000000280)={0x100, r5, 0x1, 0x7ff}) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000200)={r4, 0x3}, 0x8) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000002c0)='veth0_to_hsr\x00', 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x200, 0x0) 01:17:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x9, 0x5, 0x14, "8578e98afcc0b649929029224ff9dd712bbf45df665342819a2193eb74967a250507caf056670f9ca5208f612729285ee7ce6d0cc63f72e5b8aaa1728ee66207", "1634936e73af386700c8237e5470b5e6441004aca33c6e631ed305f938165410f54f1ed015c8dadd8adba7fa2746cc9a8958edcf56c6254e75c5fc2bc07aadd1", "480611d72ae54a13886b2cf2e40639b43b40fde60dd3303ec31281a3506b34cb", [0x310, 0x4]}) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 248.614338] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 248.622481] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:17:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getgid() fstat(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000380)=[0xee00, 0xffffffffffffffff, 0x0, 0xee01]) fstat(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000500)=0xc) r13 = getegid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f0000000640)=0xe8) fstat(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) r17 = getegid() fstat(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r19 = getegid() r20 = getuid() setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001040)={r11, r20, r7}, 0xc) getgroups(0x1, &(0x7f0000000840)=[0x0]) stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000a00)=ANY=[@ANYBLOB="0806000000000000070000000000000003000000000000000300000000000000000000000000000003000000000000000900000009000000050000000000000001000000000000000100000000000000ed6e000000000000010000000000000001000000000000007fa7000020000000040000000600000009000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="020000007f0000000000000005000000000000005400000000000000140000007b0000006d656d6f72792e737761702e63757272656e7400000000000100000000000000010000000000000001000000010000000010000000000000050000000104000000000000000000000600000000000000a15e00000000000001000080000000000200000000000000ff01000000000000000000801800000004430000490000005e74ec43", @ANYRES32=r6, @ANYRES32=r8, @ANYBLOB="0104000007000000000000000200000000000000020000000000000001000000030000002d0000000000000005000000000000000000000000000000040000000000000005000000000000007c000000080000000000000000000000fc00000000000000090000000000000006000000000000000a0200000000000005000000000000000000000000000000eec400000000000080000000", @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="000400000600000000000000070000000000000001f8ffffffffffff09000000070000002f6465762f6b766d0000000000000000040000000000000002000000000000000400000000000000000000000000000007000000090000000300000000000000ffffff7f00000000ff070000000000000100000000000000f20000000000000004000000000000000800000000000000090000000700000000000000", @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="01800000ff000000000000000500000000000000010000000000000012000000ff7f0000766d6e65743047504c747275737465646c6f00000000000005000000000000000100000000000000ff0000000000000097000000000000000500000080000000060000000000000002000000000000006c00000000000000080000000000000008000000000000000010000000000000ff0f000004000000070000000500000009000000", @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="1f000000000000000000000002000000000000008d5000000000000014000000070000006d656d6f72792e737761702e63757272656e740000000000060000000000000003000000000000000500000000000000ff7f000000000000cc000000020000000300000000000000000000000000000001000000000000000180000000000000770000000000000009000000000000000300000001000080008000003f00000006000000", @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="0200000008000000000000000100000000000000060000000000000009000000010000002f6465762f6b766d00000000000000000200000000000000020000000000000002000000000000000800000000000000ffff00004fd70000010000000000000040000000000000000500000000000000d103000000000000020000000000000000000000000000000100000076200000ff01000000800000ff010000", @ANYRES32=r18, @ANYRES32=r19, @ANYBLOB="08000000da1f0000000000000600000000000000070000000000000009000000120300002f6465762f6b766d0000000000000000050000000000000003000000000000004000000000000000040000000000000005000000f9ffffff050000000000000006000000000000004000000000000000060000000000000006000000000000000180000000000000010001000100000072f400000300000007000000", @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB="9d00000001000080000000000000000000000000020000000000000009000000050000002f6465762f6b766d000000000000000000000000000000200000000000000002000000000000000600000000010000010000000000000000000000010000000300000000000000030000000000000040f8ffffffffffffff7f0000000000000100000001000000000016007700000001000100000000000000000000", @ANYRES32=r22, @ANYRES32=r23, @ANYBLOB="0400000007000000000000000100000000000000080000000000000009000000ffffff7f2f6465762f6b766d0000000000000000"], 0x608) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) r24 = openat$cgroup_ro(r2, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x2, 0x8}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_RTOINFO(r24, 0x84, 0x0, &(0x7f00000000c0)={r25, 0x5, 0x1ff, 0x7}, 0x10) perf_event_open(&(0x7f0000001080)={0x2, 0x70, 0xd9f, 0x8, 0x8b0, 0x7, 0x0, 0x4784, 0x112, 0xc, 0x8, 0x9, 0x7, 0x9f0f, 0xb26, 0x1, 0x6, 0x7, 0x8000, 0x8d, 0x8, 0x8000, 0x8, 0x0, 0x1, 0x4, 0x6, 0x6, 0x407e78ba, 0x421, 0xfff, 0x6, 0xfff, 0x60000000000000, 0x0, 0xaf, 0x3, 0x80000001, 0x0, 0x80000001, 0x0, @perf_config_ext={0x1, 0x9}, 0x4000, 0x0, 0x9, 0x7, 0x5, 0x1, 0x9}, r11, 0x5, 0xffffffffffffff9c, 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:17:57 executing program 2: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0x397) r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x3b, 0x42400) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000140)={0x9, 0x5a2}) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000180)={0x8, &(0x7f0000000000)=[{0x1, 0xffffffff, 0x7fffffff, 0x7}, {0x80000001, 0x200, 0xf5, 0x4}, {0x9d, 0x8, 0x80000001, 0x8}, {0xfff, 0x9, 0x5, 0x1}, {0xfffffffffffffffd, 0x10000000, 0x8001, 0x100000001}, {0x661, 0x9, 0x9}, {0x2, 0x44f5, 0x8000}, {0x7, 0x400, 0x200, 0x3f}]}) r2 = openat(r1, &(0x7f0000000200)='./file0\x00', 0x3fd, 0xc5) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x1010, r2, 0x0) r3 = socket(0x4, 0x1, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') sendto$inet6(r3, &(0x7f00000003c0), 0x101d0, 0x0, 0x0, 0x0) 01:17:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:17:58 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev, 0x9}, 0x1c) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000280)=""/66, &(0x7f0000000000)=0xfffffffffffffda6) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x80000000000000b, &(0x7f0000000040)=0x81, 0x4) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000100)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r4 = open(&(0x7f0000000080)='./file0\x00', 0x400, 0x44) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000001c0)="c8e2bd39384c2472587b1efd5923dc4d", 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_crypto(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) set_thread_area(&(0x7f0000000300)={0x9, 0xffffffffffffffff, 0x400, 0xffffffff00000000, 0xe8, 0x6, 0x800, 0x5, 0x2, 0xfffffffffffffc00}) [ 248.956443] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 248.964418] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:17:58 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) read$FUSE(r0, &(0x7f0000000880), 0x1000) read$FUSE(r0, &(0x7f0000002000), 0x46d) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) write$binfmt_misc(r0, &(0x7f0000000340)={'syz0', "d328ec12ca1f5c4e6c4c650d4f96035f172195214143fa910a46215a7e581ad2d724120f5baf39ed5fb7c1003dfe80df4e2f5061244b1d78fc2b621678b05323b1f6f6f2495f9d66ecef82ac77cc69fee013607a210c735f5265a7481a0fdd25a662a179008d230128d4aca31da21a658099f00dfd47ea3ad49f6c223c91b92a501f92544091bfea3633cbb90ba36e64f8ad23493f66f766a3662349fec13e0e9b72d87a826a30ac2d70d03d9e9c4df98ae8a9a8ccb8466a1f81abfed3"}, 0xc1) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7, 0x4d, 0x2}, 0x7) chdir(&(0x7f00000000c0)='./file0\x00') write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) 01:17:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:17:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200, 0x0) r4 = gettid() ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000040)=r4) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 249.248294] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 249.256174] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:17:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") sendmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:17:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$bt_hidp(0x1f, 0x3, 0x6) recvmsg(r3, &(0x7f0000001200)={&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000011c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/47, 0x2f}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/86, 0x56}], 0x4}, 0x0) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f00000022c0)) 01:17:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") sendmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:17:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000000)="66ba420066b8f00066ef66b831000f00d80f2326260f20e6650f01d10f238026660fddfdf30f2c43000f01c3b9800000c00f3235010000000f30", 0x3a}], 0x1, 0x24, &(0x7f0000000080), 0x0) 01:17:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") sendmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:17:58 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x8840, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x3d, &(0x7f0000164ff0)={0x0, &(0x7f0000000080)}, 0xa) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001300)={0x0, 0x7fffffff}, &(0x7f0000001700)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001740)={r3, @in6={{0xa, 0x4e21, 0x5, @ipv4={[], [], @loopback}, 0x2}}, 0x100}, 0x88) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000680)={r3, 0x4, 0x30}, 0x290) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000200)=0x10001, 0x4) rt_sigprocmask(0x5, &(0x7f0000000580)={0x2}, &(0x7f0000000480), 0x8) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="ed5e683e4aff75573525928ec56ee3b5b639cb05d129112eac4216ea3ef2c86e003b8f1048ad68d3b3c6cc15ebb90ded100f2f4adfcd18bb2826e6ecbeb68e7ca2222e58ec1707640af76bdd6870c93188b083e037fe99a1117fcd49f1c0938f56defffac1a42583eabfae96cc32ef4da7c4b95283d08efd30952a16537473cef491214a45062c0cf58c0d42cd99c2145f9430460555acb21bedfdd668db21b8f6b4d26464912f2922099b2598b317982023a36925c3199dc493c66c6fa19f24871dabee920a44e90cf3260fd75b1ae066d230a4c5211017862a226f739d52af01e76fc5d807a13381d7ec2169dfcb5f", 0xf0, 0x1, 0x0, 0x0) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000340)) fcntl$setsig(r1, 0xa, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000600)={0x9, 0x6, 0x1a8784b}, 0xc) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) utimensat(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000840)={{r5, r6/1000+10000}, {r7, r8/1000+10000}}, 0x100) r9 = socket$xdp(0x2c, 0x3, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x6) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001340)=@broute={'broute\x00', 0x20, 0x3, 0x88d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, &(0x7f00000003c0), &(0x7f00000020c0)=ANY=[@ANYBLOB="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"]}, 0x905) syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x40000) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x7, 0x2009, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000400), 0x0, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r10, &(0x7f0000000000), 0x0}, 0x18) socket$inet6(0xa, 0x1, 0x0) 01:17:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffff8) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:17:59 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 249.953214] kernel msg: ebtables bug: please report to author: entries_size too small [ 250.011902] kernel msg: ebtables bug: please report to author: entries_size too small [ 250.044560] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 250.052404] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:17:59 executing program 0: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) process_vm_readv(r0, &(0x7f00000017c0)=[{&(0x7f0000000280)=""/58, 0x3a}, {&(0x7f0000000300)=""/121, 0x79}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/166, 0xa6}, {&(0x7f0000001440)=""/154, 0x9a}, {&(0x7f0000001500)=""/181, 0xb5}, {&(0x7f00000015c0)=""/103, 0x67}, {&(0x7f0000001640)=""/98, 0x62}, {&(0x7f00000016c0)=""/253, 0xfd}], 0x9, &(0x7f0000001bc0)=[{&(0x7f0000001880)=""/141, 0x8d}, {&(0x7f0000001940)=""/108, 0x6c}, {&(0x7f00000019c0)=""/166, 0xa6}, {&(0x7f0000001a80)=""/197, 0xc5}, {&(0x7f0000001b80)=""/61, 0x3d}], 0x5, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x40000, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x9, 0x2000) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="360f300f38f0a1fabb9166650f027a000f01b207140fc7990c00ea89004600f30fbcfe0f21e00f07", 0x28}], 0x1, 0x8, &(0x7f00000001c0)=[@dstype0={0x6, 0x1}, @cr0={0x0, 0x6}], 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000001c40)={0x7, 0x4d, 0x2}, 0x7) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002d00)={r1, &(0x7f0000001c80)="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", &(0x7f0000002c80)="6a04ea1fc44e35ea0de62fc2a2c1bb78c6347b9217d76c3b5b9eb37f31712c9931b486daf074fabebb1e5dfe08cbcedb5ec74affdd304dd63e2fc526b6bc582344b2b3edc6faaa", 0x2}, 0x20) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 01:17:59 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) r1 = memfd_create(&(0x7f0000000180)='\xc9\xe9\xbf\xee\x00\t\x00', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x1000000, 0x11, r1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000080)={{0xff, 0x3}, 'port0\x00', 0x10, 0x400, 0x7ff, 0x1f, 0xfff, 0xfffffffffffffff8, 0x100000000, 0x0, 0x2, 0x1}) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) 01:17:59 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 250.314761] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 250.322730] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:17:59 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:17:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000000)={0x5, 0xcc05}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:17:59 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='trusted.overlay.upper\x00', &(0x7f0000000280)={0x0, 0xfb, 0x1a, 0x4, 0xc82, "e5361f05a3b329677dce73dc2442751d", "d90c25da10"}, 0x1a, 0x2) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040)=0x6, 0x4) r1 = syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0xfff, 0xe20d68d4777f698a) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000300)={0x18, 0x1, 0x0, {0x100000001}}, 0x18) pwritev(r0, &(0x7f0000001140)=[{&(0x7f00000010c0)='\f', 0x1}], 0x1, 0x0) io_pgetevents(0x0, 0x3, 0x6, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={0xe000000000000}, 0x8}) [ 250.549999] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 250.557852] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:17:59 executing program 1: ioctl(0xffffffffffffffff, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:17:59 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x3) r1 = socket$inet6(0xa, 0x1000002000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x801, 0x0, 0xff, 0x0, 0x4}, 0x20) close(r0) 01:17:59 executing program 1: ioctl(0xffffffffffffffff, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:00 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) write$binfmt_aout(r0, &(0x7f0000000080)={{0x10b, 0xe07, 0x0, 0xff, 0x135, 0x7, 0x203, 0x8}, "d5cfdbb29b0c914cc3ff0cfba141894fbe0b52187838ad640d559af791a4f5d0e3c4cc24620c3e877ddf3b97211f0acd57a0382f3383f4acf23bc65a013d5e95407b169c431c632cd6bdd25119723fc3782f9f0d6f1ab637a6af9a1e75922c8f58195f471115a14f5a78de3330c33309d591eba0247a76f04a56c3467da70f8d5d13570d2f280274", [[], [], []]}, 0x3a8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000005c0)={{0x2, 0x2000000040000}, 'port0\x00', 0x4, 0x0, 0x5, 0xf8, 0x5, 0x7, 0x1, 0x0, 0x0, 0x3}) syz_emit_ethernet(0x3e, &(0x7f0000000680)=ANY=[@ANYBLOB="ffffffffffffaaaaabaaaa000800450000300001800000899078ac7014bbac1414000304907800000200450000000000000000000000ac1414c5ac14140074d55a59f62331c95c8a51d21c3379e32c8cc067c4cac59340db1c49bac714daa7e9dd83eb3a9147eb74d86bfb4b4473cf4a0aebd05cc62f348abad2052dc4c1248d08d3978b814b173c3dd2976d9f40cf6e4d5862ba5535ad8b31e3640c8991a5bb7b2e8619b3325ba0e0a2d716a2aef6e37d4900c0ad66a32331aa0bf66449d66874177c2eddfe358830d44306000000000000000000000000000000"], 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500)={0xffffffffffffffff}, 0x13f, 0x100f}}, 0x20) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={0x0, 0xff}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000007c0)={r2, 0x5, 0x507}, &(0x7f0000000800)=0x8) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000580)={0xb, 0x10, 0xfa00, {&(0x7f0000000440), r1, 0x6a9}}, 0x18) 01:18:00 executing program 1: ioctl(0xffffffffffffffff, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:00 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:00 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000040)=@fragment, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.swap.current\x00', 0x0, 0x0) getsockname$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="f6adaea8bd3d2755"], 0x8) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000000)="ff02040000eeff0000000000000000000000000000020205", 0x18) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20\x00', 0x40, 0x0) pselect6(0x40, &(0x7f0000000280)={0x80000001, 0x2, 0x4, 0xffffffff, 0x65, 0x3, 0x8001}, &(0x7f00000002c0)={0x7f, 0x2, 0x100000001, 0x11, 0x0, 0x80000000, 0xfe, 0x6}, &(0x7f0000000300)={0x80000001, 0x3, 0xffff, 0x9, 0x5, 0x100000000, 0x1, 0xb68}, &(0x7f0000000340), &(0x7f00000003c0)={&(0x7f0000000380)={0x8}, 0x8}) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c) 01:18:00 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:00 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000040)=@fragment, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.swap.current\x00', 0x0, 0x0) getsockname$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="f6adaea8bd3d2755"], 0x8) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000000)="ff02040000eeff0000000000000000000000000000020205", 0x18) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20\x00', 0x40, 0x0) pselect6(0x40, &(0x7f0000000280)={0x80000001, 0x2, 0x4, 0xffffffff, 0x65, 0x3, 0x8001}, &(0x7f00000002c0)={0x7f, 0x2, 0x100000001, 0x11, 0x0, 0x80000000, 0xfe, 0x6}, &(0x7f0000000300)={0x80000001, 0x3, 0xffff, 0x9, 0x5, 0x100000000, 0x1, 0xb68}, &(0x7f0000000340), &(0x7f00000003c0)={&(0x7f0000000380)={0x8}, 0x8}) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c) 01:18:00 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(r1) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f0000000000)={0x8, 0x3, 0x1}) 01:18:00 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) unshare(0x8000400) pipe2$9p(&(0x7f0000000000), 0x4000) r2 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0xfff, 0x10100) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x3a) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000040)=""/250) ppoll(&(0x7f0000000140)=[{r1}], 0x1, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0), 0x8) 01:18:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:01 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x28200, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x7fff, 0x40) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x40) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0), 0x10) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000280)={0x7a, 0x0, [0x40000000, 0x0, 0x277], [0xc1]}) 01:18:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x44800, 0x0) msync(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) write$P9_RLCREATE(r2, &(0x7f0000000080)={0x18, 0xf, 0x2, {{0x89, 0x4, 0x7}, 0x80000001}}, 0x18) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4, 0x0, &(0x7f00000000c0)=[@exit_looper], 0xe4, 0x0, &(0x7f00000001c0)="a12e15f793fd2a24cf1460aa6ef68046a3491433b95d159cff7f0c0a3b109193b501239e58ed5b92516a933dee4cb9b76f4196fef36cd349d580db011e8eae79356268d3af2be041b3b5161bb6557962ab57f417f55a89fef064c377d60297f1d17feb99389d44e0f98ab64968a5ef4a9360da96ac9eab75050deecff4ac1d747c39ba30fa26a7ae7f4816bdafa90261adcb934a5300d67b95ad5331719461c09ca1e776f232fae7be8f5688f3a6304d45e2443e2ebb6a1940f9a5e703c4c5734e8303c2f11a609d2725f47c073659925e87644c265b832e9fe7397402c682b7f57d7475"}) write$binfmt_misc(r1, &(0x7f0000000340)={'syz0', "e61d46151cdf21499f01b0ff"}, 0x10) 01:18:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/21, 0x15) ioctl(r0, 0x2, &(0x7f0000000080)="0af51f023c123f3188a070") r1 = open(&(0x7f00000004c0)='./file0\x00', 0x14104a, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x40202, 0x0) write$P9_RSYMLINK(r1, &(0x7f0000000140)={0x29a}, 0x14) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000100)='./file0\x00', 0x40204000000b) sendfile(r1, r1, &(0x7f0000000080), 0x5ac) 01:18:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) clock_gettime(0x0, &(0x7f0000000c00)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000b40)=[{{&(0x7f0000000000)=@nl, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)=""/106, 0x6a}, {&(0x7f00000001c0)=""/247, 0xf7}, {&(0x7f0000000300)=""/109, 0x6d}, {&(0x7f0000000380)=""/146, 0x92}], 0x4}}, {{&(0x7f0000000480)=@xdp, 0x80, &(0x7f0000000700)=[{&(0x7f0000000500)=""/2, 0x2}, {&(0x7f0000000540)=""/102, 0x66}, {&(0x7f00000005c0)=""/134, 0x86}, {&(0x7f0000000680)=""/84, 0x54}], 0x4, &(0x7f0000000740)=""/234, 0xea}, 0x8}, {{&(0x7f0000000840)=@ax25={{0x3, @netrom}, [@bcast, @rose, @null, @netrom, @remote, @null, @rose, @default]}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/209, 0xd1}, {&(0x7f00000009c0)=""/145, 0x91}], 0x2, &(0x7f0000000ac0)=""/106, 0x6a}, 0xbf9}], 0x3, 0x2000, &(0x7f0000000c40)={r3, r4+10000000}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 01:18:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 252.396374] validate_nla: 9 callbacks suppressed [ 252.396395] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 252.409450] __nla_parse: 9 callbacks suppressed [ 252.409471] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x81, 0xffffffffffffffff, 0x0, 0x12, 0x9, 0x3}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = fcntl$getown(r1, 0x9) r3 = syz_open_procfs(r2, &(0x7f0000000000)='mountstats\x00') write$P9_RLINK(r3, &(0x7f0000000080)={0x7, 0x47, 0x2}, 0x7) ioctl$TIOCEXCL(r1, 0x540c) syz_open_pts(r0, 0x0) [ 252.582838] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 252.590710] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:01 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) exit(0x20ff70aa) ioctl(r0, 0xfffffffffff7ffb8, &(0x7f0000000180)) 01:18:01 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x81) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000040)=0xe8) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x8, 0x40) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 252.779290] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 252.787473] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 253.031068] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 253.039134] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0xfffffffffffffffe) r2 = dup3(r1, r1, 0x80000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}}, 0x6, 0x7, 0x0, 0x4, 0x10}, &(0x7f00000001c0)=0x98) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000240)={r3, 0x4c, 0x100}, 0x8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, &(0x7f0000000280)={0x84, 0x24, &(0x7f00000003c0)="51a4207875ac37345fc8571f0b5bb07ed0a99c0d5ce836153cca33fbbec9d94e85a7c7ec4c7c9f3f1f4d624c2e5bbb9925190bcc64d9a895a2ec0ffa3d81fa076e1540fc6c51fd73bb01c049bab76ae27c66f9c7badb587b41060391ca78d0b8a63456fe6d3a4133230ee6e133e8ca7069817343171b2fd53e12204d25c10792ee0b8dcd61559b0ed31ae2f98d00f21b4c658d1ffb0fdf", {0x4, 0x1, 0x7771567e, 0x7, 0x1a, 0x8b49, 0xf, 0x1}}) r7 = dup3(r1, r6, 0x80000) fchmod(r0, 0xc4) accept$packet(r7, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000004c0)=0x14) ioctl$VIDIOC_ENUMSTD(r7, 0xc0485619, &(0x7f0000000040)={0x9, 0x4000, "fc4b0ff0484d2bc564367ac7215ba191c84eff57e6d86086", {0x0, 0x3f}, 0x3f}) ioctl$TIOCEXCL(r7, 0x540c) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r7, 0xc0405519, &(0x7f0000000500)={0x3, 0x7, 0x4, 0x10000, 'syz1\x00', 0x7}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000200)=0xc) getpgrp(r8) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0xaaaaaaaaaaaadfc, 0x0, 0x0, 0x388) ioctl$KVM_RUN(r6, 0xae80, 0x0) read(r0, &(0x7f0000000080)=""/85, 0x55) [ 253.192793] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 253.200638] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 253.414115] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 253.422612] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c12") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:02 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000014c0)={{{@in6=@mcast1, @in6=@local, 0x4e22, 0x0, 0x4e21, 0x6, 0xa, 0x20, 0x0, 0x6, 0x0, r3}, {0x2, 0xfffffffffffff801, 0x200, 0x80, 0xfffffffffffffff8, 0x0, 0xdb2, 0x70a}, {0xfff, 0x1, 0x7b3, 0x4}, 0x5b00000000000000, 0x6e6bbd, 0x1, 0x1, 0x2}, {{@in6=@mcast1, 0x4d3, 0x3f}, 0x2, @in6=@ipv4={[], [], @multicast1}, 0x34ff, 0x3, 0x0, 0x0, 0x1, 0x5, 0x81}}, 0xe8) unlinkat(r2, &(0x7f00000017c0)='./file0\x00', 0x200) r4 = add_key$keyring(&(0x7f0000001740)='keyring\x00', &(0x7f0000001780)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) add_key(&(0x7f00000015c0)='.dead\x00', &(0x7f0000001600)={'syz', 0x0}, &(0x7f0000001640)="212449209e044067f6f6e8e663e9be8889a9f65ae178841e076933b1364c81ebfdcb050e80a9caef8f121f884957384d395a888d13d13fc9ee6c5b62504b7da54a40352299fec17fd445eced9dd57e618d1119d4e17a986859c6e3138164557627afaf5d0a827ac57ad140f2874b7bfaa72185b3bceed57768c8322709ad8837f3541f07bd9016cdd1ce8d89734ea0cc43b7eb8a5826bba7b8bcfc93638c2753a14adac290bdef7b9a0b5db168e8e71753691347d47978178ba5e334553e94e8b55c3d74d268aaef1b1e8c930918546f851a", 0xd2, r4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x2, [0x0, 0x0]}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000000c0)=ANY=[@ANYRES32=r5, @ANYBLOB="00002100ff07"], &(0x7f00000001c0)=0xa) ioctl$KVM_RUN(r1, 0xae80, 0x0) getsockopt$sock_buf(r2, 0x1, 0x37, &(0x7f0000001300)=""/170, &(0x7f0000000240)=0xaa) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000300)=""/4096, &(0x7f0000000100)=0x1000) [ 253.600589] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 253.608715] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c12") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:02 executing program 3: r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x8c000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000140)={0x0, 0x1, 'client1\x00', 0xffffffff80000007, "82463c6af48673f7", "bc5461c04c43521a4b1a5c61bbb02e24ff8a02c052e79a906ac1389f0bb959fc", 0x10000, 0xd6a1}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000200)={{0x4}, 'port1\x00', 0x20, 0x10000, 0x7, 0x5, 0xbcd, 0x5, 0x1, 0x0, 0x7, 0x6bda}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f00000002c0)={0x80000001, 0x80000000, 0x0, 'queue1\x00', 0x3}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000380)='/dev/uinput\x00', 0x802, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000003c0)={0x0, 0x1, 0x80000000, 0xffffffff00000000, 0x1a, 0x4, 0x4, 0xfffffffffffffe00, 0x7fff, 0x101}) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/sockstat\x00') setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000440), 0x4) setxattr$trusted_overlay_upper(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='trusted.overlay.upper\x00', &(0x7f0000000500)={0x0, 0xfb, 0x1015, 0x2, 0xfffffffffffffff9, "ed604ca24e34a6f6269be8ef3558d285", "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"}, 0x1015, 0x3) socket$inet6_dccp(0xa, 0x6, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001580)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x48, r3, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x10, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008004) inotify_init() setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000016c0)={@dev={0xac, 0x14, 0x14, 0x25}, @multicast2, 0x1, 0x1, [@local]}, 0x14) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000001700)) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000001840)=0xfffffffffffffff8, 0x4) ioctl$KVM_SMI(r1, 0xaeb7) write$ppp(r2, &(0x7f0000001880)="115c84b8f720b490bb86a4e27c0668ad2a282797d30eadad7994148653a7f83893780d7580b8e42604986cea615284aa9088636fefb6790513236cd7a42ba69dd20972c328a947edfd2d6b209bdf463b91fc1ea076c00e48093e03f95ddc8b407183c819992433348536f98824393e23e5b718b43874430a0eed930ff26e75efc43f3eec32e8ddd4302647d091ad7d2ef48e0b8fa2368bcef3c0a42c34c55e3110cb465435915e3c8a5cd1a1353f71522ab1fe92dbfb2677988f99d913c4b2b5af83bc6467ffdb79c1d637", 0xcb) keyctl$session_to_parent(0x12) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f0000001980)={@mcast1, 0x0}, &(0x7f00000019c0)=0x14) sendmsg$can_raw(r2, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x1d, r4}, 0x10, &(0x7f0000001a80)={&(0x7f0000001a40)=@can={{0x2, 0x1, 0x9, 0xfff}, 0x3, 0x2, 0x0, 0x0, "6519427ba2a42be1"}, 0x10}, 0x1, 0x0, 0x0, 0x814}, 0xc0) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000001b40)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f0000001c40)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0xc0000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x44, r5, 0x2, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x29}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x89}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x4000000) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000001c80)={0x0, @bt={0x80000001, 0x6, 0x1, 0x2, 0xafe5, 0x17e0, 0x4, 0x1, 0x1, 0x2, 0x2, 0x6, 0x3, 0x8001, 0x0, 0x2}}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000001d40)={0x8000, 0x5, 0x0, 0x1, 0x9, 0x80000001, 0x2, 0xfffffffffffffbff, 0x0}, &(0x7f0000001d80)=0x20) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000001dc0)=@assoc_id=r6, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001e40)={&(0x7f0000001e00)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000001e80)=0x8, 0x4) 01:18:02 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x80000, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000140)="09ab7a423716cad7e9e8413bcc14d054", 0x10) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xab, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f0000000040)=0x8, 0x4) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(rfc3686(adiantum(salsa20-generic,cast6,michael_mic-gene'}, 0x58) 01:18:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 253.814994] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 253.822946] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c12") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:03 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) epoll_create1(0x3) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) signalfd(r0, &(0x7f00000001c0), 0x8) poll(&(0x7f0000000080)=[{r1}], 0x1, 0x201) [ 254.114135] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 254.122247] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x1c0) getdents(r3, &(0x7f0000000040)=""/67, 0x43) sendmsg$TIPC_NL_BEARER_GET(r3, 0xffffffffffffffff, 0x20000000) 01:18:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 254.373163] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 254.381063] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000000)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x4000) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x1a) r3 = dup2(r0, r0) renameat2(r2, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000200)='./file0\x00', 0x1) keyctl$join(0x1, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000240)) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000300)=@buf={0x0, &(0x7f0000000280)}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x100, r5, 0x401, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xac}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x70, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="a899fae0ae7b896a849ba0be05c02171"}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000340)={[{0x9, 0x1, 0x0, 0x9b9, 0x100000000, 0x6, 0x4, 0x8, 0x6, 0x100000001, 0x5, 0x1, 0xffffffff00000000}, {0x9, 0x9, 0xffffffff7fffffff, 0x1, 0x4, 0x2, 0x9991, 0x20004000000, 0x1, 0x3, 0x4, 0x8, 0x9}, {0x4, 0xffffffffffffff01, 0x9, 0xffffffffffffffb3, 0x5, 0x7, 0x400, 0x5, 0xffffffffffffff85, 0x6, 0x6, 0x80000001}], 0xc2}) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000b8000000d0000000040000007ccfbc554fefaec00c10fe181d191620e095f08c6c439a8397a826367cef9651b015b631c2db492e42f879d2e6b0adaf494b1b76a704cae4865f7d847442fe70451055755431eb3674bb22282e1c4a242d96646bbf03e8025c8186ffa014825228a0a21eb0e2a30b51c6f12dc3d9e8e96a8be5ddf5e4dca7bafc1f5172fc753b507803183ee35beb77a22649851c2a22ba05a441ae0a19a6dd8644796ca033ebb632b84692231f8253a19be43783be71cdb96fe8e2a153000002000000281976c41671feb086e7a0f265e17731f0728bcc751a3ab718197b3b884173fb9dcafac6aa3d88ffeafafba28d9f6322eff10d1a6d6ea1d275823acc2f08ec51b562b51560db950fe1d98ffbb42a350ab9de88659d6a1da5ef40974991148d2ea7553227422bfeafdcedd976a8d1787edb1cf31ecb647c0baeea272dc713013507f6fed58ee0f87b906df55ac191f6f4067e36e6ed54746468249dc3aba2047f7af0453013532ad40fe9d8b04cc94d1d05c91c63a4c08e29e4e1e7f3b87443ed369d28b18640dc5dddb428b23712d84dba1a2e6ea1be51d18fea1fbc5ca4f7e3f49b52fb17fc4f4dd5b51c5400"], &(0x7f0000000780)=""/5, 0x1c2, 0x5, 0x1}, 0x20) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$CAPI_CLR_FLAGS(r0, 0x80044325, &(0x7f0000000080)=0x1) [ 254.705145] IPVS: ftp: loaded support on port[0] = 21 01:18:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x6138, 0x1) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000080), 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x1, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400002, 0x0) 01:18:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b0") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 255.130796] chnl_net:caif_netlink_parms(): no params data found [ 255.230907] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.237790] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.246413] device bridge_slave_0 entered promiscuous mode [ 255.281093] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.287804] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.296255] device bridge_slave_1 entered promiscuous mode [ 255.341962] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 255.354225] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 255.389538] team0: Port device team_slave_0 added [ 255.399813] team0: Port device team_slave_1 added [ 255.536374] device hsr_slave_0 entered promiscuous mode [ 255.712538] device hsr_slave_1 entered promiscuous mode [ 255.819538] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.826183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.833409] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.839895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.922135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.944349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 255.956875] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.965845] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.979716] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 256.001069] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.020344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 256.029120] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.035702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.091242] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 256.101626] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 256.116589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 256.125524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 256.133818] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.140279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.148159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 256.157383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 256.166745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 256.175787] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 256.184541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 256.193697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 256.202427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 256.210760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 256.219534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 256.228095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 256.244443] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 256.252927] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 256.283802] 8021q: adding VLAN 0 to HW filter on device batadv0 01:18:05 executing program 3: r0 = socket$packet(0x11, 0x10000000004, 0x300) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x6, 0x800) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f00000000c0)={0x8021, 0x3}) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x80000000000000) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/44, &(0x7f0000000040)=0x2c) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000100)={0x3, 0x1, [0x9, 0x0, 0x12918599, 0x80, 0x1c0, 0x1, 0x58, 0x20]}) 01:18:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, 0x0}) getpriority(0x2, r4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03, 0x1, 0x571]}) 01:18:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b0") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000000)=0x1) syz_emit_ethernet(0x35, &(0x7f0000000040)={@random="bd9c54001355", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [{[], {0x8100, 0x7f, 0x6, 0x1}}], {@mpls_mc={0x8848, {[{0x1, 0x6, 0x1, 0x1f}, {0x7, 0x6a, 0x100000001, 0x3}], @llc={@snap={0x1, 0xaa, "5af3", "74cdfd", 0xefff, "82bdc55edadf84d3142e18c9e86082bc5235"}}}}}}, &(0x7f0000000080)={0x0, 0x2, [0xd13, 0x361, 0x2f7, 0xfdc]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:18:05 executing program 3: unshare(0x20040600) r0 = socket$packet(0x11, 0x7, 0x300) r1 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000040)=""/64) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000240), 0x2) 01:18:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b0") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000180)={'bcsf0\x00', @ifru_settings={0x7fffffff, 0x7, @raw_hdlc=&(0x7f00000001c0)={0x101, 0x8}}}) fcntl$getownex(r0, 0x10, &(0x7f0000000700)={0x0, 0x0}) r2 = getpgid(r1) io_setup(0x400, &(0x7f0000000680)=0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x41, 0x0) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f00000006c0)) r5 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x0, 0x0) r6 = syz_open_dev$adsp(&(0x7f00000004c0)='/dev/adsp#\x00', 0x80000001, 0x0) r7 = syz_open_dev$mice(&(0x7f00000005c0)='/dev/input/mice\x00', 0x0, 0x420000) io_submit(r3, 0x4, &(0x7f0000000640)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x7f, r0, &(0x7f0000000300)="7d946a0b0258e8743544", 0xa, 0x4, 0x0, 0x2, r5}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xf, 0x7f, r0, &(0x7f00000003c0)="878451e180cdc61bb6b529f0d6b67bb432e9a47a83f6a833a76be2a207155e81bdf47afa8063e052c388e9ebae837a7c053695d97c0e4a9ed542f7a4e3b7510ce98483feabe26990369f504246b83cc4c972e5fa0ce67a6b", 0x58, 0x2, 0x0, 0x1, 0xffffffffffffff9c}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x3, 0x9, r0, &(0x7f0000000480)="e9458ccf29d5dbb9e373d769513a", 0xe, 0xffffffff, 0x0, 0x1, r6}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0xffff, r0, &(0x7f0000000540)="f3865a3ea18f3e5715f36ad5b9acbf6f41e6c725a74e1b78dcc2c1a0d304c9bd381ff09234f7e5d0b4c5ffa661166da4d1cb7fe6db7012abe682a4a65772c00dd57e67c18b09fd849e58feeb1b999042ec9710e4e9221e7b44d2", 0x5a, 0xa5d, 0x0, 0x0, r7}]) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={r2, r8, r9}, 0xc) 01:18:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:18:06 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'caif0\x00', &(0x7f0000000080)=@ethtool_eeprom={0x43}}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x16000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000040)) 01:18:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x0, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:06 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f000000a000), &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400000, 0x0) r1 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x1, 0x42042) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000200)={0x17002, &(0x7f0000000080), 0x7, r1, 0x8}) open(&(0x7f00000001c0)='./file0\x00', 0x8040, 0x0) mount(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) 01:18:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x0, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:06 executing program 3: r0 = epoll_create1(0x0) fadvise64(r0, 0x0, 0xfffffffffffffffe, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x101, 0x440) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000000040)=""/97, &(0x7f00000000c0)=0x61) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x7ff}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000180)={r2, 0x5}, &(0x7f00000001c0)=0x8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000280)=r3) 01:18:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:18:06 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x8, 0x20000) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000001c0)=0x80) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) ioctl(r1, 0xfffff7ffffffffb1, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x5) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xfc, 0x400000) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x113, 0xb}}, 0x20) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000040)=0x28, 0x4) 01:18:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x0, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:06 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000000)=[@rights={0x18, 0x1, 0x1, [r2, r1]}], 0x1, 0x81}, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) ppoll(&(0x7f0000000040)=[{r1}, {r3, 0x100}], 0x2, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x8) 01:18:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getpeername$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket(0x11, 0x40000000000003, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={&(0x7f0000000380)=@nfc={0x27, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB="1400000000000000010000002400000000000000"], 0x14}, 0x0) 01:18:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") socket$inet(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:06 executing program 3: syz_open_dev$video(0x0, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000500)='./file0\x00', 0x800000) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) sched_yield() 01:18:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x101402, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) fcntl$setstatus(r2, 0x4, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@dev, 0x0}, &(0x7f0000000080)=0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r4, 0x1, 0x6, @dev={[], 0x2a}}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:18:07 executing program 2: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x20000) linkat(r1, &(0x7f0000000180)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x400) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'caif0\x00', 0x600}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @win={{0x94, 0x3f, 0xee4, 0x401}, 0x2, 0x2, &(0x7f0000000080)={{0x80000001, 0x8001, 0x400, 0x2}, &(0x7f0000000040)={{0x100000001, 0x5, 0x6, 0xfff}, &(0x7f0000000000)={{0x7, 0x9}}}}, 0x8, &(0x7f0000000280)="0efddf296ac4b52cc1f7aea4ee93ca3a83aa437e461741540ce1598c9551f082f56313c0a9c1c257ec0483a7dcff45b5729bfe9c76f22abed8b4e18c0758522731cb3bbbc58b1d356458c506f8f829b122a02e67a5ff6529d4c7fc8400b88ce2662e0ed12b4ce37a749c6926bb033f5f22b366d36e7be3f3c1bf5141251b6cb7e86c89f134160391fdb35d51b7cbef077ee93b655fb2559de73efc146b98c300200f594aea1fbcff1d0a2f2ce254eeae0a8211e51398d0db61d07eb403afe7f5ef07693f37c598e70f5aee1581d43268be59eaf0bcd634d475c5c6823eb9cc11d5cade644389", 0x5}}) 01:18:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") socket$inet(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$usb(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0xbfffff, 0xffffffffffff) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f00000001c0)={0x880}) 01:18:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") socket$inet(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000040)={0x7, 0x6b2}) 01:18:07 executing program 2: r0 = gettid() r1 = inotify_init1(0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000580)=""/238, 0xee}], 0x1) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) close(r1) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) tkill(r0, 0x1000000000016) 01:18:07 executing program 3: timer_create(0x0, &(0x7f0000adafa0)={0x0, 0x34, 0x0, @thr={&(0x7f0000000200), &(0x7f0000000280)}}, &(0x7f000019cffc)) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='timers\x00') timer_create(0x0, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000180)={0x5, 0x7, 0x69, 0x18, 0x7}) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/100, 0x181}], 0x3ac, 0x10000000) 01:18:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) 01:18:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) 01:18:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x2098, 0x0, &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2'}, 0x48) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000100)=@in={0xa, 0x0, @local={0xac, 0x2c0}}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000000180)=[{0x10, 0x84, 0x7}], 0x10}, 0xfc) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) 01:18:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readahead(r1, 0xffff, 0x7) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x8a) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000200)={0x4, 0x3, {0x57, 0x0, 0x1, {0x5, 0x200}, {0x10001, 0x4}, @cond=[{0x8, 0x1, 0x1f, 0x3f, 0x5683, 0x9}, {0x100000001, 0xffffffff9e69414a, 0x7, 0xffffffff, 0xdf45, 0xfffffffffffffffc}]}, {0x55, 0x6, 0x7, {0xfffffffffffffff8, 0x1}, {0x4, 0x100000000}, @period={0x5d, 0x509b067a, 0x6, 0x1000, 0x5, {0x9, 0x3f, 0x2, 0x7}, 0x3, &(0x7f00000001c0)=[0x8, 0x7dd, 0x200]}}}) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x2) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x3df) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x200003, 0x0) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000040)={0x207e358d, 0x0, 0x10004, 0x41}) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000280)={0x10000, 0x4e991b1faad3fe72, 0x1, @stepwise={0x1, 0x2fc4000000000000, 0x6, 0x2, 0x8001, 0x3ff}}) ioctl$DRM_IOCTL_AGP_BIND(r4, 0x40106436, &(0x7f0000000080)={r5, 0x5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:18:08 executing program 3: timer_create(0x0, &(0x7f0000adafa0)={0x0, 0x34, 0x0, @thr={&(0x7f0000000200), &(0x7f0000000280)}}, &(0x7f000019cffc)) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='timers\x00') timer_create(0x0, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000180)={0x5, 0x7, 0x69, 0x18, 0x7}) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/100, 0x181}], 0x3ac, 0x10000000) 01:18:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) 01:18:08 executing program 2: r0 = socket$inet(0x2b, 0x100010000080003, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)="9380420dd86667c608b615a74b18588d7ce3a8e8147159f9f6afcd5c8015fa030dcdca78f091f30a1bc5d01a867c8341825468d9fe757f6438e4816e61698deaba7b5ceaa8a6a11a9358c35edf3fdddc38c13660cd276a9dc47afa827a86e55e641695b955bf4ec48768221fedda66d29c0cc41cc4ad23307aa09547594850383a87cbbed02eb8d247238bedd961f22aceab7eeb5687dbb818de63b68434361a2501fdec3a5d86ced571c6d9fc8f", 0xae, r0}, 0x68) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x200, 0x0) recvmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000340)=@x25={0x9, @remote}, 0x80, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/2, 0x2}], 0x1, &(0x7f0000000440)=""/238, 0xee}, 0x100) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000080)={{0x11, @remote, 0x0, 0x0, 'rr\x00', 0x20}, {@multicast2, 0x0, 0x0, 0x5, 0x0, 0x9}}, 0x44) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240)={r2, 0x80000, r1}) 01:18:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) dup3(r1, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000000)=""/94, 0x5e, 0x6, &(0x7f0000000080)={0x77359400}) write$FUSE_DIRENTPLUS(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="090000ddaa08a93ccc24206165eeda870000000000000000000000000000000000ffffffff000000"], 0x28) 01:18:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 01:18:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) rt_sigaction(0x19, &(0x7f0000000200)={&(0x7f00000000c0)="c0a065566666000f5cc3c4c2d5002d22340000c4e2399b37c4a1797ec1c48221b64700c46179135d00672e41dccac4a2d1960bc482a9b62d85be0000", {0x6}, 0x40000002, &(0x7f00000001c0)="c4a17c5f70020f0bdfa7000000000fc5c4010cf30fd7fbc4e14652560dc4c2710a49cec4627935f26726460febd8"}, &(0x7f0000000280)={&(0x7f0000000240)="f30f2d3a36450fc7a039ba4b6fc4c271967632c462fd90ac62e337e4210fa1c4817a6f19f3450fd6f58fc9a092e8c0d89dc441355ede", {}, 0x0, &(0x7f0000000300)="f2420f5fcef0438177622dd3000066400f78c000f3c4c1f97efa66470fd8ff2ec20000c463515cf800c4a241df827a7b9f27c461fc111966430f3a169d008000008c"}, 0x8, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) 01:18:08 executing program 2: r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0)='tmpfs\x00', 0x10, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x21, @dev={0xfe, 0x80, [], 0x1b}, 0x200}}, 0x2, 0x2, 0x3f7, 0x81}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e23, 0xffffffffffffffc8, @rand_addr="20d7b4a0da19f17e00dcbbc478dd5c2c", 0x2}}, [0x2, 0x3f, 0x6, 0x6, 0xba, 0x7ff, 0xffffffffffffff3e, 0xa723, 0x8, 0x1af8, 0x5a72, 0x6e, 0x9, 0x3f, 0x80000000]}, &(0x7f0000000440)=0x100) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 01:18:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800)='TIPCv2\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000640)={0x6c, r1, 0x201, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @remote}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @loopback}}}}]}]}, 0x6c}}, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000040)={0x1, 0x6, 0x8000, 0xb72, 0x41e, 0xffff, 0xffffffffffffffd1, 0x81, 0x0}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={r4, 0x9}, &(0x7f0000000100)=0x8) 01:18:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) [ 259.585641] Enabling of bearer rejected, failed to enable media [ 259.618161] Enabling of bearer rejected, failed to enable media 01:18:08 executing program 2: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x101802, 0x0) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f00000002c0)) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0) openat$cgroup(r4, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000140)={0x2, 0xcc, "a4a513e0d7d7c1df67c6f85ed87405f4eae96f096c8b0b5da41c845d46557fa6404e55a8bda2bc5bdaf3a31ea1fb477baf7a5622517a1462342d0b75395d435d65df791c36ee9dba0822630322a2ad036d5d7971f3d620eb4f8c003d2a89335ea2bba46973884a1f006f837bf2f254a351f44d899f48ad925e485823440815b0965618d9bf9b60df6969a67ef43947d4e355db5f6f0f00159a12b911816ab3dcc3d88312f084b20fba558104b4a1a919b14e40c11394ce333a5094e5e31830b866990407b10f95ceabe851d9"}) 01:18:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000040)={'mangle\x00'}, &(0x7f00000000c0)=0x54) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:18:08 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000000000ff00004000030006000000000002000004000000bb00000000000000000300dcec030500000000000200423b000000000000004000"], 0x80}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) 01:18:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 01:18:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)}, 0x0) 01:18:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000000140)="1f0000000104ff00fd435463e4af645515b81e0008000100010423dcffdf00", 0x1f) r2 = socket$inet(0x10, 0x2, 0x0) r3 = dup2(r1, r2) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000200)={0x2, 0xe, 0x4, 0x1000000, {r4, r5/1000+10000}, {0x7, 0x9, 0xb4, 0x5, 0x2, 0x81, "70f87256"}, 0x8, 0x4, @fd, 0x4}) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000000)=0x7, 0x4) ioctl$VIDIOC_DBG_S_REGISTER(r3, 0x4038564f, &(0x7f0000000100)={{0x2, @addr=0x10000}, 0x8, 0x1, 0x101000000000000}) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010407051dfffd946fa2830020201e0003000100021d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 01:18:09 executing program 2: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x101802, 0x0) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f00000002c0)) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0) openat$cgroup(r4, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000140)={0x2, 0xcc, "a4a513e0d7d7c1df67c6f85ed87405f4eae96f096c8b0b5da41c845d46557fa6404e55a8bda2bc5bdaf3a31ea1fb477baf7a5622517a1462342d0b75395d435d65df791c36ee9dba0822630322a2ad036d5d7971f3d620eb4f8c003d2a89335ea2bba46973884a1f006f837bf2f254a351f44d899f48ad925e485823440815b0965618d9bf9b60df6969a67ef43947d4e355db5f6f0f00159a12b911816ab3dcc3d88312f084b20fba558104b4a1a919b14e40c11394ce333a5094e5e31830b866990407b10f95ceabe851d9"}) 01:18:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)}, 0x0) 01:18:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x100, 0x82) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000001c0)={0x0, 0xfff}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000240)={r4, 0x68, "761dc5c49856af952d8e747ceafa75df9c2f12586b5da1259aa725bfe67a658c019502602d5599d32dda6a3b25826bde0784830016e74622866031ac04d1a716cc86f569e447c4f96adc5ec897b8a4e9e9d9aef1205707d724827b3c93988b8fcfaccf738b9c54ef"}, &(0x7f0000000300)=0x70) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 260.218083] __nla_parse: 5 callbacks suppressed [ 260.218102] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 260.294852] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 260.303887] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 01:18:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)}, 0x0) 01:18:09 executing program 2: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x101802, 0x0) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f00000002c0)) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0) openat$cgroup(r4, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000140)={0x2, 0xcc, "a4a513e0d7d7c1df67c6f85ed87405f4eae96f096c8b0b5da41c845d46557fa6404e55a8bda2bc5bdaf3a31ea1fb477baf7a5622517a1462342d0b75395d435d65df791c36ee9dba0822630322a2ad036d5d7971f3d620eb4f8c003d2a89335ea2bba46973884a1f006f837bf2f254a351f44d899f48ad925e485823440815b0965618d9bf9b60df6969a67ef43947d4e355db5f6f0f00159a12b911816ab3dcc3d88312f084b20fba558104b4a1a919b14e40c11394ce333a5094e5e31830b866990407b10f95ceabe851d9"}) [ 260.379615] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 260.406816] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 260.415956] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 01:18:09 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='schedstat\x00') r1 = syz_open_dev$usb(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x80000001, 0x200000) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000140)={0x2, 0x0, [{0x7, 0x3, 0x0, 0x0, @sint={0x0, 0x8}}, {0x7f, 0x7, 0x0, 0x0, @sint={0x61a, 0x9}}]}) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000009000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000280)="67f30f2ce8baa000b008ee660f6825660ff9bf0078875e00660f6bbd06800ffd81cafcd88b97000f019be0006767f0834704f2", 0x33}], 0x1, 0x20, &(0x7f0000000340), 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x3, r1}) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x140000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r3, 0x201, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x7]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x40) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000000)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@initdev}}, &(0x7f00000001c0)=0xe8) r7 = getegid() fchown(r5, r6, r7) ioctl$KVM_RUN(r5, 0xae80, 0x0) 01:18:09 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008800, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) 01:18:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}, 0x0) 01:18:09 executing program 2: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x101802, 0x0) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f00000002c0)) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0) openat$cgroup(r4, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000140)={0x2, 0xcc, "a4a513e0d7d7c1df67c6f85ed87405f4eae96f096c8b0b5da41c845d46557fa6404e55a8bda2bc5bdaf3a31ea1fb477baf7a5622517a1462342d0b75395d435d65df791c36ee9dba0822630322a2ad036d5d7971f3d620eb4f8c003d2a89335ea2bba46973884a1f006f837bf2f254a351f44d899f48ad925e485823440815b0965618d9bf9b60df6969a67ef43947d4e355db5f6f0f00159a12b911816ab3dcc3d88312f084b20fba558104b4a1a919b14e40c11394ce333a5094e5e31830b866990407b10f95ceabe851d9"}) 01:18:09 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0xfffffff, 0x200000000000000b, 0x6}) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000000)) 01:18:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}, 0x0) 01:18:10 executing program 2: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x101802, 0x0) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000002c0)) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0) openat$cgroup(r3, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) 01:18:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0x5) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:18:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}, 0x0) 01:18:10 executing program 3: syz_emit_ethernet(0x0, &(0x7f0000000240)=ANY=[], 0x0) 01:18:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)}], 0x1}, 0x0) 01:18:10 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x80000000404802, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f00000039c0)={'bcsh0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000003a00)={0x0, @broadcast, @multicast2}, &(0x7f0000003a40)=0xc) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000003a80)={@rand_addr, 0x0}, &(0x7f0000003ac0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000003b00)={{{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000003c00)=0xe8) getsockname(0xffffffffffffffff, &(0x7f0000003c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000003cc0)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000003e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000003e80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000003ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003f00)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000003f40)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000004040)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000004080)={'team0\x00', 0x0}) accept4$packet(0xffffffffffffff9c, &(0x7f00000040c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000004100)=0x14, 0x80800) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000004140)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000004240)=0xe8) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f0000004300)={@local, @multicast1, 0x0}, &(0x7f0000004340)=0xc) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000004380)={0x0, @multicast1, @initdev}, &(0x7f00000043c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000004400)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000004500)=0xe8) accept$packet(0xffffffffffffff9c, &(0x7f0000004540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000004580)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000004600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004640)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000004680)={@local, 0x0}, &(0x7f00000046c0)=0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004b80)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000004c80)=0xe8) recvmsg(0xffffffffffffffff, &(0x7f0000005dc0)={&(0x7f0000004cc0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000005d80)=[{&(0x7f0000004d40)}, {&(0x7f0000004d80)=""/4096, 0x1000}], 0x2}, 0x40010000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000007340)={'netdevsim0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000007440)={@loopback, 0x0}, &(0x7f0000007480)=0x14) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f00000074c0)={0x0, @rand_addr, @loopback}, &(0x7f0000007500)=0xc) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x20, &(0x7f0000007540)={@remote, @local, 0x0}, &(0x7f0000007580)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000007680)={{{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000007780)=0xe8) getpeername(0xffffffffffffff9c, &(0x7f00000077c0)=@hci={0x1f, 0x0}, &(0x7f0000007840)=0x80) getsockname$packet(0xffffffffffffff9c, &(0x7f0000007880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000078c0)=0x14) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f00000079c0)={@rand_addr, @multicast1, 0x0}, &(0x7f0000007a00)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000008240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x404200}, 0xc, &(0x7f0000008200)={&(0x7f0000007a40)=ANY=[@ANYBLOB="b8070000", @ANYRES16=r1, @ANYBLOB="00082bbd7000fcdbdf250300000008000100", @ANYRES32=r2, @ANYBLOB="b800020038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400810000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000300000008000600", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="cc0002003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="4c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e6700000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400438d000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="2402020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000000000008000600", @ANYRES32=r8, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000600000008000600", @ANYRES32=r12, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400020000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b00000008000400ffffff7f08000600", @ANYRES32=r14, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c001a0000000000000000000800030003000000080004004000000008000100", @ANYRES32=r15, @ANYBLOB="4001020044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004006163746976656261636b75700000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000700000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r16, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400a50f000008000600", @ANYRES32=r17, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000100000008000600", @ANYRES32=r18, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="4400020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000400000008000600", @ANYRES32=r20, @ANYBLOB="08000100", @ANYRES32=r21, @ANYBLOB="ac01020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e0000000800040084de000008000600", @ANYRES32=r22, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r23, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400ffffff7f08000600", @ANYRES32=r24, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000600000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000500000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r25, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r26, @ANYBLOB="08000100", @ANYRES32=r27, @ANYBLOB="940002003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r28, @ANYBLOB="54000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000024000400018005035096000005000700e2050000000043d9ff030000ffffff0503000000"], 0x7b8}, 0x1, 0x0, 0x0, 0x400d1}, 0x4000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r29, 0x8912, 0x400200) getsockopt$sock_int(r29, 0x1, 0x31, &(0x7f000059dffc), &(0x7f0000000100)=0x4) 01:18:10 executing program 2: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x101802, 0x0) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000002c0)) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0) 01:18:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)}], 0x1}, 0x0) 01:18:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xffff, 0x80000) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x0}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f00000000c0)={r4, 0x10}) 01:18:10 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x2, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c6487f", 0xb2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000001680)={{0x2, 0x0, @multicast1}, {0x0, @broadcast}, 0x2a, {0x2, 0x0, @loopback}, 'nlmon0\x00'}) r4 = syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000480)="9605550835d6548b5ad5805000b57a8ecc72933d061e1ca9a29afab626959bf2b0", 0x21, 0xfffffffffffffff8) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000580)=0x2fff) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105511, &(0x7f0000000640)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc6d, 0x0, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) getpeername$netlink(r4, &(0x7f0000000040), &(0x7f0000000080)=0xc) fchdir(r5) 01:18:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)}], 0x1}, 0x0) 01:18:10 executing program 2: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x101802, 0x0) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000002c0)) 01:18:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x3, 0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0xfffffffffffffffb}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000280)={r4, 0x8}, 0x8) fstatfs(r3, &(0x7f00000000c0)=""/12) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7, 0x80) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x5000, &(0x7f0000000000), 0x2, r5, 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:18:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e2800", 0x26}], 0x1}, 0x0) 01:18:11 executing program 2: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x101802, 0x0) [ 262.238638] validate_nla: 5 callbacks suppressed [ 262.238658] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 01:18:11 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000) io_setup(0x0, &(0x7f0000000000)=0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xa, 0x7, r1, &(0x7f0000000080)="b07d9e4cd5d4f7afe17807d9e864f84b4215504f08766d4d5fbfdbb250551a9d2ba8a2965487b201b409b1e3eabdc2042ea01c2576fef46811daa93326963f04c396914a6f4b96be469cc81dffd75248fdfe35c9271669d8baef64b1637f784020a5fe0c96d5272707815508b4963cc22cab4ea8befb4958c924085f25d04b55049a5e3a7bc6756510f0bd", 0x8b, 0x8000, 0x0, 0x2, 0xffffffffffffff9c}, &(0x7f0000000240)) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r3 = dup2(r0, r0) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f00000004c0)={[{0x5, 0x2, 0x100000001, 0x1, 0x0, 0xbc, 0x3, 0x10001, 0x2, 0xfff, 0x81, 0x7}, {0x100000000, 0x6, 0x9, 0x3, 0xffffffffffff8000, 0x6, 0xffffffffffffff68, 0xc9, 0xa893, 0x92c, 0x10001, 0x6, 0x4}, {0xc14, 0x7c, 0x7, 0x5, 0x1, 0x9, 0x72ba, 0xff, 0x9eb, 0x487d, 0x9, 0x4, 0xf61}], 0x100000000}) r4 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x6, 0x101001) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000000340)={[{0x401, 0x800000000000000, 0x9, 0x3, 0x9, 0x9, 0x9c, 0x6, 0x4, 0x5, 0x15, 0x5, 0x3}, {0x10000, 0x7ff, 0x6f80000, 0x8, 0x800, 0x8, 0x80000001, 0x6, 0x9, 0x306, 0x3f, 0x2400, 0x1f}, {0xfffffffffffffff7, 0xfffffffffffffffd, 0x8, 0xffffffff80000001, 0x20, 0x80000000, 0x8000, 0x7, 0xfffffffffffffffa, 0x8, 0x0, 0x7fffffff, 0x5886fe77}], 0x321}) sendto$packet(r4, &(0x7f00000003c0)="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", 0xfc, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) 01:18:11 executing program 2: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 01:18:11 executing program 0: getgroups(0x5, &(0x7f00000001c0)=[0x0, 0xffffffffffffffff, 0xee01, 0xee00, 0x0]) setfsgid(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/247) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:18:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e2800", 0x26}], 0x1}, 0x0) 01:18:11 executing program 3: fstat(0xffffffffffffff9c, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = geteuid() setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x1}, [{0x2, 0x2, r0}, {0x2, 0x5, r1}], {0x4, 0x7}, [], {0x10, 0x5}, {0x20, 0x6}}, 0x34, 0x3) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000004c0), 0x10) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vfio/vfio\x00', 0x214101, 0x0) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000440)={0x2, &(0x7f0000000400)=[{}, {}]}) io_setup(0x94, &(0x7f0000000000)=0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x1, 0x10200) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140), 0x4) io_submit(r4, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000200)="060000008cfc6cfde19ab3a251fd2cfd09684d9c7afae3b519d21a2ce3cbdfcb2665dd1203ed5f1023fa813c9a0e46000000a03f0a797f0064", 0x39}]) ioctl$KVM_GET_MSR_INDEX_LIST(r5, 0xc004ae02, &(0x7f0000000480)={0x1, [0x0]}) ioctl$VIDIOC_DQEVENT(r5, 0x80885659, &(0x7f0000000240)={0x0, @data}) 01:18:11 executing program 2: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 262.555769] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 01:18:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e2800", 0x26}], 0x1}, 0x0) 01:18:11 executing program 4: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c, 0x80000) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000080)={'security\x00'}, &(0x7f0000000100)=0x54) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x9, &(0x7f0000000140)=[{0x1, 0x3, 0x8000, 0x4}, {0x2, 0x2, 0x0, 0xed5}, {0x5, 0x800, 0x8, 0x1}, {0x4, 0x59b, 0x8, 0x1ff}, {0x9, 0x40, 0x3, 0x80}, {0x62, 0x3, 0x8, 0x7}, {0xfff, 0x9, 0xffffffffffff6cd6, 0x1}, {0x7fffffff, 0x10000, 0x3, 0x3}, {0x761c667c, 0x80000001, 0x2, 0x4e4d}]}, 0x10) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x1a000, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x80000001) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x20002, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000280)={0x31, 0x3, 0x0, {0x1, 0x10, 0x0, '/dev/cachefiles\x00'}}, 0x31) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000002c0)={0x0, 0x0, 0x7fff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={r3, 0x80000, r1}) acct(0x0) r5 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x40) mount(&(0x7f0000000380)=@filename='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='v7\x00', 0x40000, &(0x7f0000000440)='/dev/ptmx\x00') r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r6, 0xf, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) write$binfmt_script(r4, &(0x7f00000005c0)={'#! ', './file0', [{0x20, 'v7\x00'}, {}, {}, {0x20, '/dev/cachefiles\x00'}, {0x20, '/dev/ptmx\x00'}, {0x20, 'wlan0#'}, {}, {0x20, '/dev/cachefiles\x00'}], 0xa, "6a2d8c6038cce902272f45398ee63698cee7cbd60a4611d7f8ac0e0bbe9af3484f704f77666f1db2bd06784647c300db8646f73218472e771f1d72112bd13d3b9ba92decc9dccff827513009e585752d376e0981b39e58ad2b0c52366b25e06049d7356cea8bf49ed4becdc3606d1645a6dd53bbd5549d4dd76bfeeb3484a8938fb2315b221c36601cf7aed1940c"}, 0xd4) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000bc0)=0x0) r8 = fcntl$getown(r4, 0x9) fstat(r5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = gettid() getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000002900)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@dev}}, &(0x7f0000002a00)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002a40)={0x0, 0x0, 0x0}, &(0x7f0000002a80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002ac0)={0x0}, &(0x7f0000002b00)=0xc) r14 = geteuid() getgroups(0x6, &(0x7f0000002b40)=[0x0, 0xee01, 0x0, 0x0, 0x0, 0xee00]) fcntl$getownex(r4, 0x10, &(0x7f0000002b80)={0x0, 0x0}) fstat(r1, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r18 = getgid() ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) lstat(&(0x7f0000002c80)='./file0\x00', &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r21 = getgid() r22 = getpgrp(0xffffffffffffffff) fstat(r4, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000002dc0), &(0x7f0000002e00), &(0x7f0000002e40)=0x0) sendmsg$netlink(r5, &(0x7f0000002fc0)={&(0x7f00000006c0)=@kern={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002880)=[{&(0x7f0000000700)={0xd4, 0x36, 0x200, 0x70bd2d, 0x25dfdbfd, "", [@generic="87b3237262d3ef5d44f57904c72db2952cb609f0144d797a11b69ea8a2fd3ee59c68b39915438df8bf12a397371b0c222358ff2bee32a20df8baaf78c91b8f4ab932070f5a87ba10866d175bd6d8671a09c908cb550a63a79e244cd2c432a9b8b40dd01b748d53319e4e115ee384cdb504e23c451ff87da07d2b1986716473efa5165cf647cd479dce944d5cac9a035281eb6175e3970e1c57b9be4d9b0ae1a2bb48da57bc97a5207f20e3f63efb9ddef4d9072ee698897317cfec2ed53bc24aae690b57"]}, 0xd4}, {&(0x7f0000000800)={0xbc, 0x36, 0xa, 0x70bd26, 0x25dfdbfb, "", [@nested={0x68, 0x85, [@generic="38573f3b54532195f8288cb043c823f71831af330301367f2446c900a3e560ab9c324661e15f1914818a919bd3ecbae6a2a637eaac16536d7e5a69d5a8c7d8848ec085b416a9eeafa1596b467331ce53457360267faf842ee17d62c8395157fcb6"]}, @generic="6cad67e0b50cfd26c59c587ad301bafdae2bd4c64e7312081a88283377947eb2fb51c4e52e7ac61a3d4d031c60754aea9c", @generic="037fd9a21d85eb4688dd5abaf17e451b22"]}, 0xbc}, {&(0x7f00000008c0)={0x2e4, 0x27, 0x20, 0x70bd2d, 0x25dfdbfb, "", [@nested={0x94, 0x6, [@generic="72034e118cc4345fded03618aa7274cd6dda91dde02a74493f278385651b30ab0fcc8cb1d7f7d7086b2cd9af7301045336aa08eea9d53e8a056748affd052d96a442cb2ff328df63bb88f9c7896e014bd30603d051d9a17d0f7a4ea8367412ddf8556397417c11c2521f9ea997c8ba3df2df8ac07d51b84cb865627dbdab2361c40bd0eb175d5ab40528fdc485"]}, @generic="f647095d2bcbdfbd0aabaefc0b2a4a607a833254df0f3bcf1351f39f", @typed={0x8c, 0x58, @binary="c8a6c22b25715d31e665946708732639d8bed4851e298298a3e9c7edb0b310789452954f06d5d2978dc201d8ccd633b6c52928fa8ff15304052836439308d06fc04e6016bfdd1f94fab9e8936057fb41b3ccd04cb6344276e58a57abbdb1005cfc4f9e1cd7e8bc13f1edd328f8bce60dbcd0e112b633fd91b8ee27bb8fe524c3e698fc0f0b"}, @typed={0xc, 0x33, @u64=0x1}, @nested={0x6c, 0x11, [@generic="d6d258e6f55ea9c395826f0f2827069e2f57a5cf2fb497158dd933331d1add58168c65683fe17eb0a687da34f3b521b47087011ed31ee47ba0005f240cac558240b56cc6e77c02efcb2a4a0b93aaf025870a4f935db7c67da7db64926df391c561af24df59b0062c"]}, @nested={0x94, 0x1a, [@generic="7f47b9e5f611478f53440861de6dad0a8c27ca9289a918526df6cf2d15d8b1e6a99206025403033a2ae18ed9d4597c6182a2ce90ab51b331fdfc91071ad8894976938d535bd2904b7ecdc1da1d167e01cfedad2b7f2c13e50869ae3c8ba27a823be4a4b54377047033ef4b2914f9dae0876b4bb1701dfca677cce46082275137253076ecd2dfbf11b5492f104965f7f0"]}, @nested={0x84, 0x35, [@typed={0x70, 0x10, @binary="2c179e275f50399d7146c5b2dc0aeb5f5fa6e2198b0a2bf4224984f03bd86a4335b55aae76830a3140261cb936fe2400b588bd6c2f524ceb0f100b397df535e8c8d5f6cffb9ce4352800a0d5b386086f94bed20b73a60e7fb6e3e5ff58bba813eef80cee1457d9135978"}, @typed={0x8, 0x6a, @u32=0xd954}, @typed={0x8, 0x61, @fd=r1}]}, @typed={0x8, 0x28, @ipv4=@empty}]}, 0x2e4}, {&(0x7f0000000c00)={0x6c0, 0x42, 0x4, 0x70bd25, 0x25dfdbfc, "", [@typed={0x8c, 0x66, @binary="41e814f6d45386ee1630c42216dad3b81cbfb41ff50fd242ba774cd039064900c67ee0da2302da165d9fb6754533e90bd5b4cf4375b14de40d9680cd99a8a515a12b52fc31c73d15410ceab44e025354433afd355d891f2f52e82a90143278325a58538283be1da1935d389a07b3c5bada470c6a8837e776292ba84d91bbe97716ebaba4e5dc"}, @nested={0x1ac, 0x4a, [@generic="207354dfac5d5866de23c3ebd3575745a5e23a9f852198063e90c0ecd7cc6f4a68979d27c49480e623080dfac7caffe32aef09201d497e50eb0a0b423038c3f6a218aef73a10eb249e9aee0e733ae428573274d6709a5ce919c5d7db2a13514fa752f7", @generic="8b98a4b360319be6f9ba73fe932e80fcfdccd28b69bbe81f55c101617a5181a0d9dc7584d1a2e6329766059ea2d8440f7a4f0b", @typed={0x10, 0x30, @binary="f06aa6422f7b12ef8d"}, @typed={0x4, 0x3e}, @generic="01b5ea41c039fd99566c0291cfdc77b8986dc4e495602f004822c35b6e512e630a296953037a35407e7fa91a5c6e5da2ae685e62fc0b675e470519875f50a29543e8039999edcd81d61f66af8df4cd6678dd80f64a85b7b618c13431990a345090429a46683a24116a84e2355bbdab23d3dad2dc1e43f66a2d3a4d21e48336e14fefbea9dbb6ada238f61b523b7240ebd80177cd31dfe6c083cf160e141097ae5fa2099543a6cf9027448dbf1012a90b5065e5c44122a0f07ec6baa97df215a6afa03cac70c3fa2bbf3861c872fc87f3f6acbe135a33df2093d2857cbff66d2416929558ca96d23356c89a790562d0a302ad74e0662649bd18616bd59fd2"]}, @generic="87", @nested={0x374, 0x28, [@typed={0x8, 0x51, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0xc, 0x25, @u64=0x1fbe}, @generic="080979bf682a89545eeaa0e30ff09276f4e3c9a410035ca744d95c826ad3582910834d3bcfd42b63a0acc3515686a8306921db99ea2e4a1b8c851b8df26d31d5f77e0342d7d6245f2a42c645e30b4904fe846bd5b153a55038cc8968121c75bae9cbb5f53bcf464b02359f92b33fb7add52597be0a846ea36e6659b67ae8ff282b2e49e46050", @generic="2f5a7b40a8772a7a442845a8fd788d84a9601d04afd0be862bc0ae053701689a8b699fa0a2eee7cefe7ed2790fa245bf60e74e9f98ed0330b5b4af980a32f3adca5409229bcee3a86bfecafc1e4afc51cf59450b3a2f0747c389", @generic="8786d7a5c6b7789ed6716cf4e258d3aa0ff5bb59acf47029621f37b68072fd1f21238319978619d5e7c98ff9741f0297a59c44ec442dcf55cccadf5df4e2bc866a4c6687aa5a831fbe9ae94981e6923cd6bc327d237beac44a8cc5c951dbe20cf2a58adeb47e981cd784d971b344c157803ebc98a069f44b69ab0109ecca1cb76d2cb0896e1eabfb200e53d69836cb5a36f5d8f602060b90c0aef75add4dd7", @typed={0x8, 0x6b, @pid=r7}, @generic="73e24a997207df426cf46e799a3cd863e6fb5254a40dcc5577a119bc18aee53f554925b15ad0f895ae42a28246d68444d7dd97f103c0745f5988819224ca0bef49c2d9f37a44e400f5ac76dc780bbeb53d630150f9d32cbaae255de9cba0d402eca52f8bb5b2c6d00a02bebbeacd89b3c8c5b99b28e5ea3b88c74ac72fb542313863037b3b17f9ea2e57a092878bfd2aae5a", @generic="1c9ecedf73ecd99fcc985a53a2c49802214faa05c5ec86bd2c6287252bf534e1d352e5bcbaa3df8e52311c6e4aacdf295c7cb05986c15e8fcbadfdce795eb1060c0bd9f104243092a112680af6bdd7a19c", @generic="b3c129cfd2f4c77c21e7452658068e1878927ac493a82a3173445d8c3f5dbd89972079d8b494ece618328366fb70f25ee1af58444f3113332d47548943a07f942f4eeee2b06df0c3c4ec9418b386737ead6acdb190bbe494ebfaf1215e3bb407d0b2fcd74c10b3ecc1505e9cda61e9b0c56bfc0739bac4ec3fcc9cdc6372cc5c9c0c2ce84a724e118eebefec", @generic="69f706ee719e7d22befbb966667cee0cd657aaf2332e803e508360554a955c04245e5fe856110a28ca36e1156017d3176db6e458ce82256c05629880f2ae15bfd368e5233c3e9f60a6474e794e785a6cbaa48333d8027233b313e7f0cb6d894c052651a0bb83"]}, @typed={0x100, 0x8a, @binary="b09e0e791487a5a4e1b2f055c517321dd74087f221aed6d46ec77124dad79eaaeffd6cec78d76981b2b200f62da85108f2432182c57fb1a45345e30cd5191ced7ef0032edc86fd6e6a22204b8c4aab1054dd4649bffd44bb7c65290db35ecd3000f2fb3303eb0ac9c7357209fcdc8ad08224fbbb12df8396375bc2667c1ccedd1e3e0539e09da0c03e9371a9a8b8ea6e765825dbce89c897374045bfe532aea90c7a4dc4f5e254ff56edbd27dadc489558e9cfbc3f1dca002a76da992f9552b09b3ad8f315c6488ccc86dae88cd1813ccb9fb0f9a285111234ee4d32b87f20c29224cff1c5f1672560e2775e38b4e234056bb3e91b34ab97b7"}]}, 0x6c0}, {&(0x7f00000012c0)={0x168, 0x2a, 0x11, 0x70bd29, 0x25dfdbfc, "", [@nested={0x5c, 0x84, [@typed={0x8, 0x1f, @str='\x00'}, @generic="cf8bbf1d9446b42e92db5d72dd02d7c951d2ec30c24e2a02054cef18ae0b2012ae82a4414490f32c41c4bc93e5d75ed17dad193d877965a3c28b8113417645c27bb78edb2e1d7d0e25c2b166b965"]}, @generic="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"]}, 0x168}, {&(0x7f0000001440)={0x18, 0x17, 0x100, 0x70bd2a, 0x25dfdbff, "", [@typed={0x8, 0x67, @pid=r8}]}, 0x18}, {&(0x7f0000001480)={0xf0, 0x1a, 0x10, 0x70bd26, 0x25dfdbfe, "", [@typed={0xc, 0x50, @u64=0x7}, @nested={0xd4, 0x35, [@generic="120bf645c8a5776ed356843487cee043e3c01ce1c9f59215458b51c3e706509cee23d095dae323adb3deff345aafa5d1a5094db7791751db8125b27e6d451a80bfe1ff372bb99d9837f9451290a82c2d1b25e34727d6aaae1e602dbadbb0fec8a129d582177fa3906ac3c2dde8fee9be27229f9f6388e10397c505f85e077b06a9167e9fab8d45fefc3a06072e51ec5b2d3bf9f1bf0c0d9c0cc5769b15268bd5595d25ec0b3a34ceee84c3acf9de620a6c8ecd5c8f8ca938feae847d2ba6202d9be045e3136ea72335e7", @typed={0x4, 0x7a}]}]}, 0xf0}, {&(0x7f0000001600)={0x126c, 0x20, 0x100, 0x70bd26, 0x25dfdbff, "", [@nested={0xc, 0x8, [@typed={0x8, 0x61, @uid=r9}]}, @typed={0x8, 0x66, @ipv4=@empty}, @generic="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", @typed={0x8, 0x39, @str='!'}, @nested={0x94, 0x87, [@typed={0x8, 0x5a, @ipv4=@remote}, @generic="388d7144e94e59577cce4d1b2832f17db3433bf14fb90124b4a31e2277a5420a9f2acae5164ad6e9e21033c64e9f2954408b756b94faf2099411fbecd50ab106770df50a03fa0e5c4661dde8afd81e613d65b671f349764ab46efdc60a6e", @typed={0xc, 0x57, @u64=0x2}, @generic="26c6fbfb4b52757c79d0eea150a95b790d5256b86c821ccfc8aa4437"]}, @typed={0x10, 0x34, @str='/dev/ptmx\x00'}, @nested={0x15c, 0x37, [@typed={0x8, 0xe, @u32=0x2000000000000}, @generic="c38978429790974f62f26b1d4c5bccd674c2d2460b677dcc22aa7652d14c2df4fb1ede39c7397b478508f0c71a3873cc66b7a1b4936fa2e8b311735c", @typed={0xc, 0x82, @str='TIPC\x00'}, @generic="1e0a288f4d6be8ea67c74fd7369b7badfd2cbdf5d3e53e987016dd9c14f8cf3896c6bfea450a1c1e7a78bb7850ab14ba8a6d2c0203f5b283a26f4e0d", @generic="61827941adf51222cf343045f22721154449b9a3623888136f91fa91e908e9bc0d91608668c5ea076d176043174d19fda903ea05f162ec62983681a443b63b99aee9f1eae66f31b54306b3a2d44b690d8ba9886a0cfe419a348cadab173dea32b297011babe2c4bce04b9406d6ae881267005844a5a8be15b1f8f15e17decaebdde87955d4a02b3753268deddeeaf9547be68a90ced85fd90610f04c87d6ad46f90b022635159afd662fd238b119fae76a4cc14e70319645bc0420ecfb78f6731943f15a78e49b4083df1485"]}, @typed={0x8, 0x3, @str='#! '}, @nested={0x38, 0x5d, [@generic="7f791bcf8f4e1f09f9a8077e5cff7738c6c4472222bc1577554000897b8e096ae341eb5f4daf4cfdc4449d", @typed={0x8, 0x6a, @u32=0x100000001}]}]}, 0x126c}], 0x8, &(0x7f0000002e80)=[@cred={0x20, 0x1, 0x2, r10, r11, r12}, @cred={0x20, 0x1, 0x2, r13, r14, r15}, @cred={0x20, 0x1, 0x2, r16, r17, r18}, @rights={0x20, 0x1, 0x1, [r2, r5, r2]}, @rights={0x18, 0x1, 0x1, [r4]}, @cred={0x20, 0x1, 0x2, r19, r20, r21}, @rights={0x30, 0x1, 0x1, [r4, r5, r0, r5, r4, r0, r1, r5]}, @cred={0x20, 0x1, 0x2, r22, r23, r24}, @rights={0x20, 0x1, 0x1, [r4, r4, r4, r0]}], 0x128, 0x880}, 0x20004850) 01:18:11 executing program 2: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 01:18:11 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000001c0)={0x2, 'veth0_to_hsr\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000200)={0x2, 'lo\x00\x00\x00\x00\x0f\x00'}, 0x18) 01:18:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)={0x2, 0x100000001, 0x4, 0x0, 0x0, [{r0, 0x0, 0x81}, {r2, 0x0, 0x13}, {r1, 0x0, 0x4}, {r2, 0x0, 0x5}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x7, 0x10000) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000240)={0x0, 0x3, 0xfafdc749db9ba8ee}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x1) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x2710, 0x0, &(0x7f0000ffa000/0x4000)=nil}) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x480000, 0x0) syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) dup2(r1, r2) [ 262.880473] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 01:18:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012", 0x39}], 0x1}, 0x0) [ 263.042313] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 263.053986] IPVS: stopping backup sync thread 11476 ... [ 263.114786] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 01:18:12 executing program 2: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 263.191932] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 01:18:12 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = inotify_init() r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) renameat(r3, &(0x7f0000000080)='./file1\x00', r2, &(0x7f00000000c0)='./file1\x00') fcntl$setlease(r3, 0x400, 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) rename(&(0x7f0000000280)='./file1\x00', &(0x7f0000000000)='./file0\x00') 01:18:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012", 0x39}], 0x1}, 0x0) 01:18:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sysfs$2(0x2, 0x80000001, &(0x7f0000000000)=""/96) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:18:12 executing program 2: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000340)) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 263.452823] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 01:18:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012", 0x39}], 0x1}, 0x0) 01:18:12 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x200000000000006, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) socketpair(0x402, 0xa, 0x244, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = request_key(&(0x7f00000001c0)='keyring\x00', &(0x7f00000014c0)={'syz', 0x2}, &(0x7f0000001500)='/dev/nullb0\x00', 0x0) keyctl$describe(0x6, r2, &(0x7f0000001540)=""/57, 0x4) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001800)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r4, 0xc0305302, &(0x7f0000000240)={0x8000, 0x6, 0xc, 0x1f2, 0x2}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000001580)='./file0\x00', &(0x7f00000015c0)='trusted.overlay.redirect\x00', &(0x7f0000001600)='./file0\x00', 0x8, 0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000100), 0x12) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000001400)=0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000001840)=""/4096, 0x1000}], 0x178, 0x3f000000) mq_timedreceive(r4, &(0x7f0000001640)=""/82, 0x2dd, 0x10001, &(0x7f00000016c0)) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0xa01, 0x0) write$eventfd(r8, &(0x7f00000001c0)=0x556, 0x8) lsetxattr$trusted_overlay_redirect(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='trusted.overlay.redirect\x00', &(0x7f0000000380)='./file0\x00', 0x8, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f000000c200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000007900)=""/206, 0xce}}], 0x1, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000080)={0x1ff}, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x1c9c380}, 0x8) [ 263.846914] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 263.847830] IPVS: ftp: loaded support on port[0] = 21 [ 264.188660] chnl_net:caif_netlink_parms(): no params data found [ 264.255113] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.261717] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.269988] device bridge_slave_0 entered promiscuous mode [ 264.281048] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.287692] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.296063] device bridge_slave_1 entered promiscuous mode [ 264.326703] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 264.338392] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 264.369454] team0: Port device team_slave_0 added [ 264.377896] team0: Port device team_slave_1 added [ 264.556669] device hsr_slave_0 entered promiscuous mode [ 264.712735] device hsr_slave_1 entered promiscuous mode [ 264.928799] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.935401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.942650] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.949193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.053613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.079224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 265.089621] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.100357] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.113257] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 265.137489] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.158521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 265.167290] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.173838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.231831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 265.240581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 265.249112] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.255631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.264390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 265.273735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 265.283288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 265.292268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 265.301130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 265.310411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 265.319456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 265.328048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 265.336603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 265.345253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 265.355855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 265.364718] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 265.413024] 8021q: adding VLAN 0 to HW filter on device batadv0 01:18:14 executing program 4: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x101, 0x2, 0x4, 0x8003, 0x7, 0x100000001, 0xe1e7, 0x9, 0x0}, &(0x7f0000000180)=0x121) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x20, 0x800f, 0x6, 0x20, r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x9}) read$FUSE(r1, &(0x7f00000012c0), 0x1000) epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x0) 01:18:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) unlink(&(0x7f0000000000)='./file0\x00') syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:18:14 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 01:18:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d82", 0x43}], 0x1}, 0x0) 01:18:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x400, 0x40000) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x7) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 265.745354] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 265.760622] binder: 11530:11531 ERROR: BC_REGISTER_LOOPER called without request [ 265.814697] binder: 11530:11531 transaction failed 29189/-22, size 0-0 line 2896 01:18:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d82", 0x43}], 0x1}, 0x0) [ 265.864581] binder: 11530:11531 got transaction to context manager from process owning it [ 265.873454] binder: 11530:11531 transaction failed 29201/-22, size 0-0 line 2887 [ 265.900221] binder_alloc: 11530: binder_alloc_buf, no vma [ 265.906816] binder: 11530:11535 transaction failed 29189/-3, size 0-0 line 3035 01:18:15 executing program 2: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 265.935755] binder: 11530:11531 ERROR: BC_REGISTER_LOOPER called without request 01:18:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 265.982541] binder: BINDER_SET_CONTEXT_MGR already set [ 265.988059] binder: 11530:11542 ioctl 40046207 0 returned -16 [ 265.997297] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 01:18:15 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$NBD_CLEAR_QUE(r1, 0xab05) listen(r0, 0x100000000) getsockopt$bt_hci(r0, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x54) [ 266.053817] binder: undelivered TRANSACTION_ERROR: 29201 01:18:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d82", 0x43}], 0x1}, 0x0) 01:18:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x400, 0x40000) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x7) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 266.321400] binder: 11558:11559 ERROR: BC_REGISTER_LOOPER called without request 01:18:15 executing program 2: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 01:18:15 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000500), 0x4) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x69f, 0x2000) bind$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x0, @loopback}}, 0x1e) [ 266.363484] binder: 11558:11559 transaction failed 29189/-22, size 0-0 line 2896 [ 266.376743] binder: 11558:11559 got transaction to context manager from process owning it [ 266.382060] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 266.385473] binder: 11558:11559 transaction failed 29201/-22, size 0-0 line 2887 01:18:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000040)={r3}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000000b00)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 266.516775] binder: undelivered TRANSACTION_ERROR: 29201 01:18:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23", 0x48}], 0x1}, 0x0) 01:18:15 executing program 4: io_setup(0x5, &(0x7f0000000100)=0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000080)={0x3ff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x1) io_submit(r0, 0x0, &(0x7f0000000600)) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000140)=""/92) 01:18:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x400, 0x40000) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x7) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 266.706977] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 01:18:15 executing program 2: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 266.863861] binder: 11580:11582 ERROR: BC_REGISTER_LOOPER called without request 01:18:16 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x9, 0x8000) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000340)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000700)=[{&(0x7f00000003c0)=""/166, 0xa6}, {&(0x7f0000000480)=""/82, 0x52}, {&(0x7f0000000500)=""/204, 0xcc}, {&(0x7f0000000600)=""/252, 0xfc}], 0x4, &(0x7f0000000740)=""/87, 0x57}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000800)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000900)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000940)={{{@in=@multicast1, @in6=@empty, 0x4e21, 0x0, 0x4e21, 0x80, 0xa, 0xa0, 0xa0, 0x27, r1, r2}, {0x8, 0xf1a9, 0x80000001, 0x180000000000, 0x8, 0x4, 0x4, 0x5}, {0x8, 0xfffffffeffffffff, 0x8, 0x7ff}, 0xffffffffffffff81, 0x6e6bb7, 0x0, 0x1, 0x1, 0x3}, {{@in=@multicast1, 0x4d3}, 0x2, @in6=@local, 0x3501, 0x6, 0x3, 0x4, 0x3, 0x20d, 0x1f}}, 0xe8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r4 = accept$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x5, 0x7, 0x2, 0x6, 0x9}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000000c0)={0x22d, 0xffff, 0x8, 0x3, 0x7, 0x6, 0x7f, 0x7fff, r5}, &(0x7f00000001c0)=0x20) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 01:18:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23", 0x48}], 0x1}, 0x0) [ 266.927235] binder: 11580:11582 transaction failed 29189/-22, size 0-0 line 2896 [ 266.989289] binder: 11580:11585 got transaction to context manager from process owning it [ 266.998600] binder: 11580:11585 transaction failed 29201/-22, size 0-0 line 2887 01:18:16 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") mmap(&(0x7f0000000000/0xc72000)=nil, 0xc72000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) fcntl$setsig(r0, 0xa, 0xf) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000100)={0x0, @dev, 0x0, 0x0, 'fo\x00'}, 0x2c) bind$alg(r1, &(0x7f0000000500)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=0x0) r3 = gettid() r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x8000, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f0000000080)={r4, r1, 0x2000}) 01:18:16 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) [ 267.122208] binder: undelivered TRANSACTION_ERROR: 29201 01:18:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x400, 0x40000) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x7) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23", 0x48}], 0x1}, 0x0) 01:18:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23", 0x48}], 0x1}, 0x0) [ 267.457152] binder: 11604:11605 ERROR: BC_REGISTER_LOOPER called without request [ 267.474316] validate_nla: 1 callbacks suppressed [ 267.474336] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 01:18:16 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) [ 267.516434] binder: 11604:11605 transaction failed 29189/-22, size 0-0 line 2896 01:18:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000040)) r3 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x1ca, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r3, 0xc038563b, &(0x7f00000000c0)={0x0, 0x0, {0x1, 0xfff, 0x2, 0x7fff}}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 267.585426] binder: 11604:11605 got transaction to context manager from process owning it [ 267.594030] binder: 11604:11605 transaction failed 29201/-22, size 0-0 line 2887 [ 267.599064] netlink: 'syz-executor.4': attribute type 29 has an invalid length. 01:18:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7ef", 0x4a}], 0x1}, 0x0) [ 267.713164] binder: undelivered TRANSACTION_ERROR: 29201 01:18:16 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 01:18:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000040)={{0x3e, @local, 0x4e20, 0x1, 'wlc\x00', 0x10, 0x4, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x3, 0x7f, 0x89, 0x1643523c}}, 0x44) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0xfb}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) syz_execute_func(&(0x7f00000000c0)="c4017b2c17c403b96ae40246fdc4427918b603000000c4a1957c88020000008027cb67660f38092cc2c422d9ad7cf00b6544ff8100000000f240ae") getsockopt$inet_buf(r1, 0x0, 0x50, 0x0, &(0x7f0000000000)=0x107) [ 267.799885] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 01:18:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x400, 0x40000) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7ef", 0x4a}], 0x1}, 0x0) [ 268.006191] binder: 11628:11629 ERROR: BC_REGISTER_LOOPER called without request [ 268.014165] IPVS: set_ctl: invalid protocol: 62 172.20.20.170:20000 01:18:17 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, 0x0}, 0x0) [ 268.065000] binder: 11628:11629 transaction failed 29189/-22, size 0-0 line 2896 01:18:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xfe4, 0x42000) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000200)={0x45fc, 0x5a30, 0x1, 0x702}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) setns(r2, 0x30020000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x7) [ 268.162466] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 268.165425] binder: undelivered TRANSACTION_ERROR: 29189 01:18:17 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f00000000c0)) 01:18:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x400, 0x40000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7ef", 0x4a}], 0x1}, 0x0) 01:18:17 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, 0x0}, 0x0) [ 268.495084] binder: 11648:11652 ERROR: BC_REGISTER_LOOPER called without request 01:18:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x420000, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x88, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 268.554510] binder: undelivered TRANSACTION_ERROR: 29189 [ 268.593951] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 01:18:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x2, 0x200000) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev={0xfe, 0x80, [], 0x16}, @loopback, 0xca, 0x20, 0x7, 0x0, 0x400, 0x20}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) write$P9_RXATTRWALK(r4, &(0x7f0000000040)={0xf, 0x1f, 0x2, 0x1000}, 0xf) ioctl$IOC_PR_RELEASE(r4, 0x401070ca, &(0x7f0000000080)={0x0, 0x7, 0x1}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:18:17 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, 0x0}, 0x0) 01:18:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf", 0x4b}], 0x1}, 0x0) 01:18:18 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000)='\x00H\x00\x00\x00\x00\x00', 0xffffffffffffff32) unshare(0x400) tee(r1, r0, 0x8, 0x0) 01:18:18 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={0x0}}, 0x0) [ 268.925899] binder: 11669:11671 ERROR: BC_REGISTER_LOOPER called without request [ 268.955547] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 268.958043] binder: undelivered TRANSACTION_ERROR: 29189 01:18:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf", 0x4b}], 0x1}, 0x0) 01:18:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) unshare(0x400) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000e6110551"]) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x20000, 0x0) 01:18:18 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={0x0}}, 0x0) [ 269.213450] binder: 11685:11686 ERROR: BC_REGISTER_LOOPER called without request [ 269.276262] binder: 11685:11686 ERROR: BC_REGISTER_LOOPER called without request [ 269.290089] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 269.325126] binder: undelivered TRANSACTION_ERROR: 29189 01:18:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf", 0x4b}], 0x1}, 0x0) 01:18:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:18 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={0x0}}, 0x0) [ 269.586275] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 269.625619] binder: undelivered TRANSACTION_ERROR: 29189 01:18:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:18 executing program 1 (fault-call:3 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0xd000, 0x3000, 0xffffffffffff0001, 0x6480000, 0x1}) [ 269.901814] binder: undelivered TRANSACTION_ERROR: 29189 [ 269.934091] FAULT_INJECTION: forcing a failure. [ 269.934091] name failslab, interval 1, probability 0, space 0, times 0 [ 269.945509] CPU: 0 PID: 11714 Comm: syz-executor.1 Not tainted 5.0.0+ #11 [ 269.952475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 269.961866] Call Trace: [ 269.964538] dump_stack+0x173/0x1d0 [ 269.968232] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 269.973661] should_fail+0xa19/0xb20 [ 269.977446] __should_failslab+0x278/0x2a0 [ 269.981743] should_failslab+0x29/0x70 [ 269.985693] kmem_cache_alloc_node+0x123/0xc20 [ 269.990332] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 269.995753] ? __alloc_skb+0x218/0xa20 [ 269.999700] __alloc_skb+0x218/0xa20 [ 270.003487] netlink_sendmsg+0xb82/0x1300 [ 270.007722] ___sys_sendmsg+0xdb9/0x11b0 [ 270.011840] ? netlink_getsockopt+0x1460/0x1460 [ 270.016572] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 270.021834] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 270.027263] ? __fget_light+0x6e1/0x750 [ 270.031312] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 270.036580] __se_sys_sendmsg+0x305/0x460 [ 270.040927] __x64_sys_sendmsg+0x4a/0x70 [ 270.045074] do_syscall_64+0xbc/0xf0 [ 270.048943] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 270.054262] RIP: 0033:0x457f29 [ 270.057598] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 270.076646] RSP: 002b:00007fcb72808c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.084430] RAX: ffffffffffffffda RBX: 00007fcb72808c90 RCX: 0000000000457f29 [ 270.091754] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000004 [ 270.099088] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 270.106406] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcb728096d4 [ 270.113723] R13: 00000000004c4f20 R14: 00000000004d8c88 R15: 0000000000000005 01:18:19 executing program 4: unshare(0x2000400) r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1000, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x25c, 0x14, 0x7, 0x200, 0x70bd2b, 0x25dfdbfb, {0xf, 0x0, 0x4}, [@generic="bb602f84050e2ea1062b0ae9dd2907f4f0b1edf757086098797547e6ac89ef7650809b6f02c41d77b85b7bf54b65db259d1b8bf4aec262fdda54ecdd4dc3214994fafc4c0fec0002d64f2f107c4ad3d5000e0ce08343af6aaf6930759376b5d7dfb68eb61fda789f68a87ad71a5f1b28fa733f8cc4e62b6a5d0f210b6e52b24b43ae7a747067ddffd375af291eb8e1fabcad6b9c43fa9b3c003dfbdda91d770c9d01bc6dc9e8960c3fa85a96", @nested={0x188, 0x84, [@generic="890a095ed1c16df40ba1091d82f9122a79c89b071b253d8e3cf0983b7adeb9e090bcc4377ab45336c6bfc76a5a0138e8b0d035bb41d2e9dec5fc89811b0bd9131d72e16125481b3ade10889e7cedc5228d82f99240d24a94373ca56450f66bb955f4bae6d6a56c2dc40506351df1eff9d64766fdfb3b33198b0ac7824c0ed8a1cfedf51aca461f29d1a06482de373e54ab731962e5495626df222c1ade412bc42dea8aff79dc1aa531b0f088b05cd9e02e5b495dba7b92", @generic="9ba4a5625f68b1527326a34b61e1cfcdced538c5a35354eea4f75293a62f09ae933c5bfaff73b0fe0f0abfea9e2b06235c18a7828e8a91cd522ac08532dd78416e4c351291de81e2b5576e24cdd8474a0b4faafe425a4b52b8151583fc6af193de8bca281d136a00598df273c452bf018c137b5431ce9f91b8ddd00f8a76e24f6952329440585bcb4ca1730b78aa1a8d7465178f61b1b719e729fbf7c1cefa19234c9be16523e36be4f55a16402a28cdaa7a422389906749297bc12edd67604c2719c5f90c29", @generic="434760f18cbd4b"]}, @typed={0xc, 0x95, @u64=0xfffffffffffff11c}, @typed={0x8, 0x68, @ipv4=@dev={0xac, 0x14, 0x14, 0x27}}]}, 0x25c}, 0x1, 0x0, 0x0, 0x4008000}, 0x850) connect$l2tp(r0, 0x0, 0x0) 01:18:19 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 01:18:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:19 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 01:18:19 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x88) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x101000, 0x0) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000180)="c283fb28a12ea8db824516b5efc303abdf4b48fb0249ff2d1f8709be742b15303c9cea31f93afafdc8be373b0abd2fd0246b0f8a31472a5c8d72cd3ff5d3ba8998149029adb85b74c483683647aea00d53fb32061ce6dfb0", 0x58, r2) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x13f}}, 0x20) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000200)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}, 0x8800) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000002c40)=""/4096, 0xff4b}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x154, &(0x7f00000003c0), 0x18, &(0x7f0000002880)}, 0x0) 01:18:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000000)={0x2000, 0x8000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:18:19 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 01:18:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:19 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}]}, 0x80}}, 0x0) [ 270.877138] binder_thread_write: 8 callbacks suppressed [ 270.877159] binder: 11747:11749 ERROR: BC_REGISTER_LOOPER called without request [ 270.915126] binder_transaction: 12 callbacks suppressed [ 270.915163] binder: 11747:11749 transaction failed 29189/-22, size 0-0 line 2896 [ 271.014450] binder: 11747:11749 ERROR: BC_REGISTER_LOOPER called without request [ 271.022319] binder: 11747:11749 transaction failed 29189/-22, size 0-0 line 2896 01:18:20 executing program 1 (fault-call:3 fault-nth:1): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/rt6_stats\x00') pread64(r0, &(0x7f0000e3e000)=""/8, 0x8, 0x1) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f00000000c0)={0x39, 0x7, 0x400008, 0x3f}, 0x10) 01:18:20 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}]}, 0x80}}, 0x0) 01:18:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) r3 = request_key(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='+\x00', 0xffffffffffffffff) r4 = add_key$user(&(0x7f00000008c0)='user\x00', &(0x7f0000000900)={'syz', 0x3}, &(0x7f0000000780)="9939453c45e40438119f7773342f73ce6aa92c86f2088f632ac5bbdab2dd6d5dbd32fc317fa2e132b89a1cbe4b2d4fd5fe1ac105fa41ec9491a53a210ab644a9e7112c6a62800b6ba6436c7da176df5b7e9172d6d405040fd915248bd43300c9539a1787ec3dd395efde72466a586a127da1626a992146b4940575d65c2b09283068204d8b61d88d3326168ff578b316a4b86e0dc9fd50fdd3ca0940020e5e7c75bbb37ef2d36a4919ed1ee389f003af007fac565116ec3e1fc8f60337a844ab7bee13e3ce41e54f3d28731a31aceda8e6b0000000000000000000000000", 0xea826d1ada16c56b, r3) r5 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="56b0b1df53be1522f87c8f849a445f29f431d97ee97ae5b88d02952de39b1e6882bfe1d4056934752f6254a57ad156c10971da9a6ff754805d4b9e757fb8af18a9d614f41954f1d0f5575b7a2fe3c86d7cca2a4c51abd636e1daeae0a554c9af702f6dd169a916cf9aa3593e30866438b6024003ed40a49c41f61f13c5b0c62544c595451816294be1e007dd140aec27892e0e49abca2b27a92e853892dbb68e6155fa", 0xa3, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000540)={r3, r4, r5}, &(0x7f0000000580)=""/252, 0xfc, 0x0) r6 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="53645e1471c14e423892fa9861cb7b35557a38bf36b467c9bdbd4e023758e81ee583071e1fb015c1f714bf904336f9d1b853f7c24647c6c98d418498db93f3dc6aeb58a2b49fd7f0815a0ef78ef9666a", 0x50, 0xffffffffffffffff) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000740)='/dev/qat_adf_ctl\x00', 0x94000, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000940)={0x7, &(0x7f0000000880)=[{}, {0x0}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r7, 0x40086425, &(0x7f0000000980)={r8, 0x3}) keyctl$get_security(0x11, r6, &(0x7f00000001c0)=""/62, 0x3e) ioctl$KVM_RUN(r2, 0xae80, 0x0) r9 = syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0xfffffffffffff892, 0x84000) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f0000000340)={@multicast1, @multicast2, 0x0}, &(0x7f0000000380)=0xc) finit_module(r1, &(0x7f0000000680)='+\x00', 0x2) getitimer(0x1, &(0x7f00000006c0)) ioctl$sock_SIOCGSKNS(r9, 0x894c, &(0x7f0000000700)=0x7) keyctl$clear(0x7, r3) setsockopt$inet_mreqn(r9, 0x0, 0x24, &(0x7f00000003c0)={@broadcast, @multicast1, r10}, 0xc) 01:18:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 271.296183] FAULT_INJECTION: forcing a failure. [ 271.296183] name failslab, interval 1, probability 0, space 0, times 0 [ 271.307819] CPU: 0 PID: 11764 Comm: syz-executor.1 Not tainted 5.0.0+ #11 [ 271.314803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.324223] Call Trace: [ 271.326900] dump_stack+0x173/0x1d0 [ 271.330604] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 271.335871] should_fail+0xa19/0xb20 [ 271.339669] __should_failslab+0x278/0x2a0 [ 271.343984] should_failslab+0x29/0x70 [ 271.347972] __kmalloc_node_track_caller+0x202/0xff0 [ 271.353166] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 271.358658] ? kmem_cache_alloc_node+0x1d2/0xc20 [ 271.363672] ? netlink_sendmsg+0xb82/0x1300 [ 271.368084] ? netlink_sendmsg+0xb82/0x1300 [ 271.372489] __alloc_skb+0x309/0xa20 [ 271.376274] ? netlink_sendmsg+0xb82/0x1300 [ 271.380670] netlink_sendmsg+0xb82/0x1300 [ 271.384914] ___sys_sendmsg+0xdb9/0x11b0 [ 271.389135] ? netlink_getsockopt+0x1460/0x1460 [ 271.393929] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 271.399225] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 271.404687] ? __fget_light+0x6e1/0x750 [ 271.408770] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 271.414069] __se_sys_sendmsg+0x305/0x460 [ 271.418392] __x64_sys_sendmsg+0x4a/0x70 [ 271.423176] do_syscall_64+0xbc/0xf0 [ 271.426952] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 271.432250] RIP: 0033:0x457f29 [ 271.435487] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 271.454524] RSP: 002b:00007fcb72808c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.462272] RAX: ffffffffffffffda RBX: 00007fcb72808c90 RCX: 0000000000457f29 [ 271.469759] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000004 [ 271.477070] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 271.484351] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcb728096d4 01:18:20 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x8, 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000880)) r1 = syz_open_dev$sndseq(&(0x7f0000b88ff3)='/dev/snd/seq\x00', 0x0, 0x0) readv(r1, &(0x7f0000000300)=[{&(0x7f0000fd5fc3)=""/61, 0x3d}], 0x100000000000004d) r2 = gettid() ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000140)={0x8, 0x5, 0x5aaf, 0x9, 0x3, 0x80000000}) timer_create(0x0, &(0x7f0000000380)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4, 0x32, 0xffffffffffffffff, 0x0) tkill(r2, 0x1000000000016) vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f0000000040)="5c054087a5a3a88ba6c4c1853fcb1949d0a714", 0x13}, {&(0x7f0000000080)="d8cfb293b8c0a19f6b3d5df6143c51ae197f0b4fc4162799af9133f827e36d37fac250d414470ac1cb9c3c9512f01d8920770c29ecd3ffa7fba1afef241c9de09975ca60548458b843515c89d059d37587cb783c84bb5000d8d3af0ec3a190c25eb7e47d9c5d52c65729983ff541dc694dfba5b61bf5ea6f6d4ad65ae26b8614abe501823b21074d1bb9cbfed8833041e9adfaad2f4d5b940654bb78a8468f4e69b6a6933d74d68d3de7d3de604e8f01cf63c175df450c6573df", 0xba}, {&(0x7f00000001c0)="a6d5847a8bcaa3ab050952b3ba8c47f3907ae9155b573d88478e44548edb5a44fdace42ece554948e586b00e6f68d09e35c8ed13a0096c5cc1bf2253503e85d2eb02e8c6311b0d0eeb0001f9f6b031f33bb5deb4e5f96aa9bf04e8ff5dca1b41989e1c2d2b0a86a4b47ca533559328acdd328d9d5d1c210b1085d489999f", 0x7e}, {&(0x7f0000000240)="a23d769044d782e147dc4adfb045d2c1037d9956e72404f7b563fcae5bd15732637ae007a199495224c10aff5a2ffa1b6414be8758122677df98dd0c195c43a02028b149fdefb6481571792bbe026f12a822ffdcdf3b7d39e9c68556c3892ea9a79c5173", 0x64}, {&(0x7f00000003c0)="8cdbcd61454a8e3331dea3df92635feeb23859f5732e817e6ea18a34d580a75590c8b80fc79df8d3eccf2cfa6af99980389b90403951a02bfe67950541a8ee42ae29152785ec159ae968203076ba110abf9e7219fa3cd8d4d4db0e9b1f80f4ebcfc1dabaf9cd5846da105ce5ca4b6839908f30165f9ad759aabcd0dc96a2f4577b081a193f1452620e370bc0be5b08e359cb2a3f09daa5a4fe0f6d72254ef8ecd34d95e8e59edfa67b074bc91d55065dc1ac61251b87c4e2ea7cdc4d4be9a0e5a59621a059a4700da9e17cfaeb5666af70ebd4533ef781", 0xd7}, {&(0x7f00000004c0)="5fd60e5b6d593038ab341aa12c4d612a419fbe72eac2b5ef1113281be31e0cf24198c93c34bfd6f12c17e1e094e2011f2e67c9af62fd278db4a111540d30c3f43d5bc30fffbc417990838eb324c35bd8ee85", 0x52}, {&(0x7f0000000540)="9d3fff3602e622806359007a12fced34ba8786b74a0b382a245b3f5042ffefd83c9d42306ae3fd945c2937d1d6d709f786e04cdb59edd99d2664d6aa725c955f3af73535b9a45e4cff1b5f8ae7b06df66d42e242eaa2a78e68d494d22b34d42b3be6c05ca8f499594f0ff366da1508a3ed6a0ad99aa7d978da6deb230e7c91abbaabf6a0e6266b70caa964ce7ce42b63f15ec2a658d64c7b0097c9", 0x9b}, {&(0x7f0000000600)="b6935fe98e967e6a75e508abc50ea80572fa1b2c151f29e666a35f44f4f0bcf230667ddf05c144d3397790f09fa1d1e496f4cb0a9139f0c36eeda5228a8c977fee412c7539ed", 0x46}, {&(0x7f0000000680)="38c7467cff350962f9b521e998b3fb404e2994d8b2c4b3d535769cd9569d9ceaf6c5e4838a3883c942e4b2b17861c0e891920c7cff57f1376a6ea34d0c0e0e9566d3cbf791c42140c665186ba476b57130c63bcc17633a37f7aabf3a424f886f580bc7ee0a80f304eaef02af45fd579d3138cf475af5e149ee2f08d3227c3c43d38ccf699914d42316d965fce7e2950a3343b82f24dc942712638cdc23d4d67fae4cb57c87428e707d7b7c85b099b37eb14b", 0xb2}, {&(0x7f0000000740)="98c74c64f3818ed906f2aea626bd68a6c7653a0e0e6803a8d693bdd8f440b685cd030d5654e6565529048b0ba26eb267150beb1c3aca74eda7e2b3e0f3983b68bf27eaf4b5786bb755", 0x49}], 0xa, 0x0) [ 271.491637] R13: 00000000004c4f20 R14: 00000000004d8c88 R15: 0000000000000005 01:18:20 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}]}, 0x80}}, 0x0) [ 271.547419] binder: 11769:11771 transaction failed 29189/-22, size 0-0 line 2896 [ 271.560947] binder: 11769:11771 ERROR: BC_REGISTER_LOOPER called without request [ 271.569052] binder: 11769:11771 transaction failed 29189/-22, size 0-0 line 2896 [ 271.584050] binder_release_work: 3 callbacks suppressed [ 271.584068] binder: undelivered TRANSACTION_ERROR: 29189 01:18:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x200000, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x8, 0x80000) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f00000001c0)=""/245) [ 271.774862] binder: 11779:11780 transaction failed 29189/-22, size 0-0 line 2896 01:18:20 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 271.823738] binder: 11779:11782 ERROR: BC_REGISTER_LOOPER called without request [ 271.831540] binder: 11779:11782 transaction failed 29189/-22, size 0-0 line 2896 [ 271.852550] binder: undelivered TRANSACTION_ERROR: 29189 01:18:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:21 executing program 1 (fault-call:3 fault-nth:2): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 272.040087] binder: 11790:11791 transaction failed 29189/-22, size 0-0 line 2896 [ 272.065260] binder: 11790:11791 ERROR: BC_REGISTER_LOOPER called without request [ 272.074424] binder: 11790:11791 transaction failed 29189/-22, size 0-0 line 2896 01:18:21 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 272.123294] binder: undelivered TRANSACTION_ERROR: 29189 01:18:21 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0xfffffffffffffd94) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 272.375625] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 272.383564] FAULT_INJECTION: forcing a failure. [ 272.383564] name failslab, interval 1, probability 0, space 0, times 0 [ 272.394965] CPU: 0 PID: 11802 Comm: syz-executor.1 Not tainted 5.0.0+ #11 [ 272.401931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.411419] Call Trace: [ 272.414111] dump_stack+0x173/0x1d0 [ 272.417857] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 272.423146] should_fail+0xa19/0xb20 [ 272.427386] __should_failslab+0x278/0x2a0 [ 272.431700] should_failslab+0x29/0x70 [ 272.435678] kmem_cache_alloc_node+0x123/0xc20 [ 272.440832] ? __alloc_skb+0x218/0xa20 [ 272.444888] ? __nla_parse+0x532/0x7e0 [ 272.448894] __alloc_skb+0x218/0xa20 [ 272.452692] inet_rtm_getroute+0xac7/0x4210 [ 272.457100] ? is_bpf_text_address+0x3c5/0x4b0 [ 272.461806] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 272.467374] ? kmsan_get_shadow_origin_ptr+0x60/0x440 01:18:21 executing program 5: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) ptrace$setregs(0xd, r0, 0x3, &(0x7f0000000040)="a687438f710934d8906870f34df0902770f61da28200619c1d616dba4e6df87989b788f8de4a20fbd424293abee9959a2d12253de0e1dd3c538259bd7d0463ba4d8d809952885c9fd43fdd574844ea0696e010836b3386c4c3d245466ff1232383e08b4f590a1bae99d7679ab5088eac440f0dff428658cc689447a4c53a18bd8925d50c0b856f89d63607b3469768d47c28eb7fe17232b2313fc026d134") r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x62, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) read(r1, &(0x7f0000000140)=""/169, 0xa9) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20024000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r2, 0x409, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x800) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vfio/vfio\x00', 0x400, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, &(0x7f0000000380)) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000003c0)=0x2, 0x4) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000400)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file0\x00') ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000500)) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000540)=0x5, 0x4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x80010, r1, 0x0) r4 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000580)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f00000005c0)={&(0x7f0000ffd000/0x1000)=nil, 0x2e6, 0x3, 0x88, &(0x7f0000ffd000/0x1000)=nil, 0x5}) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x5) fchdir(r4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000600)='/dev/uinput\x00', 0x0, 0x0) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000640)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000680)=[@in6={0xa, 0x4e23, 0x6, @mcast1, 0x101}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e24, 0xa4, @empty, 0x2}], 0x68) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000700)={0x0, 0x3f}, &(0x7f0000000740)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000780)={r5}, &(0x7f00000007c0)=0x8) sendmsg$nl_crypto(r3, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)=@del={0xf8, 0x11, 0x0, 0x70bd2c, 0x25dfdbff, {{'drbg_nopr_ctr_aes128\x00'}, [], [], 0x2000, 0x400}, [{0x8, 0x1, 0x8}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x3}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4008890}, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200400}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r6, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008840}, 0x1) sendmmsg$alg(r1, &(0x7f0000002e40)=[{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000b00)="698f365e96ed0ff01b054826cc75380412a254ff89946b986ac41e8ce711388024ad02fa682c49388d8f7128bb231ab19b5e58e6810280d8866a18fb590b56549879e72e0ccebec32f5fa8c5b105541775bfb321feb50818037d27c1ddf895bd4c75dc390ea626f2f8b4af90d3c7594ddd2cba8c31cf80ec44191559398361b169991d75b45cb52c9c332bac5fd3130369fce14c703b4cdb7b49ee24ce397584e85d81f98338da2f5f6717ef1764827fb248ad99879b73fbdc8e300d7a74e9d519798c49cb7fc791eba5e28e0f8cf3d73036a73e27bee397d8b40cdd0413df6fc234f23c3af700349d61b56ae2577c8a75850525bd0dfdfb6695479b7677167a28cd603895c6e52dd349fb95ab13a861bb8f19963f0fd2b8c19d4a5b85341b20ec42dc921a0040a96cbf3c74b40728c9a75fabbb84bd0a6f91a40fdb1349f30553a3788c5cacab9fa87a41358764db31816763912defea8084fd5fb5696e7330315d8bbe66c013c1b220dc62c35769fd28de098c5a5bb5d4f1eebda16cc53ce671e08025c0b9e3a9932254f0c18c9c4dd45a9eb96a9023218aa13bc12eb70892f137f4c164b6153c0d25aa9afa7355e4a6b610db1d5697ce9c294992a0d0ad097eaca6f622b48cde977026d051530e31deb942e70c21a1c7f62a74aea70f1f58f324ce164303c81673655316292a5b30e76a7f1e33693e04334db1b2077c07c2fbdf2d57514b344c0d692a99c8b016b986e97de066b6d70de13aba7b246bcad41dee4a3c2532aef54275fdcbc067f67f85d9d6d01dc3f78539ca71549d1c0497a31184b00bef226c001d425509d01d095fe6ceb543b363a3168389c7ececd744c1b7c5f97e3ce00685cd242c2aa17386d3855c1452d2587d85d1adc473fbd88dab2ad872b9a3934263631778c48677d745c9c6012841916914ac1daefc18e034c7bc88aa88285453803266ecc783ce7d51a558f2766ccf18b935e788929031a25982f01f82434990834cb91c5afa1d8b353939d7c6a2a1d1f7adca6054b20577cafc2ef643c14e3dfb21d7d381bb128955d5713f518fdf445f6189214f9fae438d686402570d989e6b4a3cc91689fcb90ba978b5f3c44611db3e76a50eb28630321233485f2e48c2b2c3c9c9081842fa0ac52d71fa08ca86a94f5201dea0d7b9b4771610c81df795e7ef3454ac19a77a1da83641bd08ea890247b8b9cc1f4b46d6bf1f647b29e037ed121834da944d92d4da4e040951f5a1a4d028aa6046c15fc8af187715937bc53dc24562cc9cc57fec57e65d2fc31224e7723f2bc2b78ccb7abd5523aed3e03ae355e1a512d749629c2a4db69a73a9d951e0e7cf5b3bb3ffdadc63bfb3892e81399697aae0fc8e5980620f4a7a37173b7e40ed25e196e08e6bb55ff990a94c34f34b9e8becf100d9d268b6998767e2d8df36e3068b894d04c04997d5f566cbec6909fc8495a58354fa9e448159efdc35c7b4dddd9ac4937a66b1a09a6a80a2de82020fc8f81de464e974fa3f6a01f63fec277270d82870361fd9db7075c31e3debfd667c2b3ad0be2333964a7906212be299a13bd0b3dca25a4bff878df255f8f22de1816ae3d9d13054a0851b5336c271a78d3da0a4686b811e167337b7463816a29be91257c546399e80363a0d19b590af16e27ed13468907107f14c523013422ac848fbe0c1ebb1487399d71277f7bd6d1dce91ea1c0b196123ccf37a792fa6750c1271cec1878537f1b6910b07b352e65b0ba5b8893a8459d5c8ed0e7a7a9e96b8b1ac596d255832b7873b221360e011f99aa4cd25c7965b133ec2dcbb630b4523ab8959079ea9193b0e42c47f852151928f15c647dcd7eabdc6c5a27f5f8180d137d7b84fc8b49f88663d0b519a8c4c62637afd94af61176b3e00b83ff160c4fbf32bebb1c60c90182cff54077d9f741fb51bda7e5e278836ed5712a58d751f63b7c5cd6de84bd201f34cd403303669d3ef33f0130be3639cffb46315e9863a719555e39f7330ae90117c013df08769a47a89e91179be50af485332a200a4c403c3fc254c5210c7b2c5fa36db335bfbe49568472698abd1adefc2b849640ad6a2f762df7cf0e568662d1ee91c1effcf1f6d59322e8a379daf07490dd14575974927a86b3876916ab6048c003361edddc17b693824e7e3ae56665b1b5cf7b6c2b60c71ee30c2f1e412aeb16bb50c44f2157ee63d59e27b0cd9ef987045b81cb9fb728ba320c73fe73437feddddfda06ea6b3cdb747bb7d13991910893f44e52ad84f557bd7671717b1f3a6e3911e2844ca867d78ef720fa3660d93cb4171879cf9b45b9e2f78fc6b0990dd34476c4252fcfd7c5847d399eb6d6b73efb386324631cb0c1755fc80dea20601aaa20211f8ab4abdc619be4c0c1e05d59a3f29eeeee6d0b459a835ad559a294e755d85994500d476d9c8a69d104e40b84f2fce603c7c4e78411856ec4b57c842f87abb0c9813429ccb4afe0ffcdc9ee4652133c09bb832c41e796829b7d3ea1462c262f58c7ac7f8dcd3c9e7995c0357bc13758cb526bd5b2a23d63056472d78d3131a64d39047f68ef9492415b105292b9b5b825005864da7c4df1a6dc26afba024979f77c5a12b15dda52114af224578587b945920520c3bdd9fee359bd43c23ea1f55dfc47d1c7a426ec22b5673cf61479c644bef54df8517988c4bb2a9d1125162c21a2b0e7ba27b0763ba32cf325c94c9ed138ad3b6cc20fc722252aa76c4893fd394aaacc9a1c6b614ec1ca2bf409c03c60cecd6356f8c264f65391e59dc18df9e0da401aa33b8cfbde443f23cf303d3a4fdfdc5a1e3c114789e039b14bc7f6637332cb03f8c4dfcb9884b0b2c57e201f67e2d68263b3f7bac9f0e58a02255a99c6415411bd69838b8d8ff271cb6636626f84f76ed442ee3919a5e563a33ef6e70704b8e0482c2cfa7dd4609e5c2381df007cbf326737fdeb28a42cfef45499b2ba2be5eb87b31fb7cc9740c78cce59a2fe89f6d0c648b6f0fd8193c2278da465955d4898b3022c14e449bf7ef991aa0e10ceb366b4c3c3352d5da08df846d8b8f79cad591396892a5653a4a1916ca6e1cbd8cb6b19b6abaee98f130ac0f5a343794c7578bfd879e0f0b3c6234b5086f69abe3ff27a008decec6dfc386505ec54891926a4f25e29bcab572cce99a4ea07b97c2ffa0daacb43bc674202784604526a1fb791ee9b75a00e509768ac842b2ac68ff38c79489cdda5c8f4db6ce5af3f9a1c8eb2f40f98c88caa4e3f3df4b44978234ca9bc40b468d53024e9d7a3cfdac27ccc650b5eaccf3dfda16a6690150abecbfc4d01cd9af1bfea58802607e44b5034a67be71728eda8e29263510790a36e3d4837d32e35bb250b4886f3a2edb27a9af984adf2d73086cdb70f836ee66fc801330b4af075318957214ca03b37f747253e2c56496614904da03337be0efdc94ff177d5618820068d035ea3eae69e6e15fb8cb8f418bcf9ebb37a8058bee8d58e6d392699d75d3abe079861fd45e4e2e28007a690fcb0a253aaf24cdedc21137e572ef66bd6ee77c5e44de3bfd10baa6a53da11be10f6f6d96a77cbb4d4d59b075b1453fe5297d52907f3a140715475615c8da8e4b9eb9f7ff4f8d53d22100e678fe5bbb6649f1c1e9febf0cbee9513b84dffe5393c82bd0453f42a14ee1faa9ed6eaa11ca636bf67befd325cf3983d79dfe501d189238670ad2e0e56174c2e36c70a2fded1e2ee8e6c9498bba156f4c25f059166a9b34b278d03fd2a055d376209ddd79c3bf0d67c315a4e8a45ed7470f17b2777eae315e9f57d60220a38640657a56444348eb8cd4c9497d160b919af3b893af52954c74744802d0d8dd51854f6b1c57ff5064e8dadeb0834be44462e27104b52bebba6fa2cf12a0bfb66a3a65944db79d61a0e42d193491597c3cdb0d77ab57f963d322c6785ba9a919ce475d57d90cd6d0a8609d42b6d6ef85e2200701aecdddf435bab5c535438371c12b563c69e36d1a6499ba85a0eb181ab29350c7233d5730fe648dd3990eac3a81133b25baaa08ce8fa0f06cc3a2e67482f5230b57616cca49756d05b715d87ca2830f6492daeaf3eec8b4c0a13ad85b168bcf9cb09c8976e9d3cbdaa894cf5198a317c0b4645cf7ee3600164b7ccf4d7da03d7053c746b69ee87e697fa538504b960bdf348b269aacd7e6a2b85547d6a7d1a723ecc8d21dd715b309dac2874def661d70eb760a05e600fde48231abff87011d994a4aca08bd4059d3149ee94765579297210b0943812c836dd3c5203428be1d2af8e418e6667be86094148135103cf38acec4daf9cba457b1b609138ffb2dff29e71a98a56f6398464742c57ddec8f39a6a4c43b1a015333be409a2d19fea2bd0a578ae773f9e48de538dae29529805402de1ab3fad5ca86c0e971f66e12751dc419cba773c25476d2811f03f24f7a6694b3c8be91cdaf5a719bf2b1fd3b74be9f3de79a4eaed174114735bd9428e892a5717e57b37d2d28be6677e208d1d831514472d88c8347542b7995dcaf66a0ee7811d2bb1ad19d7518f4edebc27e8945cfc4d1e5f01b7a9c7871aca09b914414a21dae70106bddefc9494d8f6991456768656123eb75ed13db623867e76a79ffa120d09d76f8055fdbcb9fcc18e746e450e9fba3aa121845a6ff469a7748d38736e3c2d04733a4532deab2013d003f5863a2059266e40ec5a818fe765154a981c80e66bfc8e4a4148c9932709dfc03af8509537fd2142e545dba4c00c0b057e798843da4f5c6cb87d70ac09ea055f10b19727447f6174d50316b8b1edad3e7e2ae8176c62d8d968fe441896d2602cf855362831c1a4d19f2aeb9c30ec4a29f3b5cc60f8de3ea573b72d2c8e0e6c9255ad68af47e4dfc5a56b9a92a2ff34c8423dbf1d16bc29b8a139e59e0edfbf1a766649eee774261a1f8f6767ca8040364d2736e7400d27b5774a016076e09489b0f2e7ab50d1d4d297879063e6719ab1d40adbe34d0175b8751db98670041fb418f2c258c4a8c0eeead4a3f50948579a53a3d13539661288c33cb0b6ca11781cb1253c415a0419264420f566f80f79ed74e0fd44253f266b246f8b2c8e6e6632e3e3664bee293ce81d55e6b3da8c6072575b035ad9b92aa5afb90bfcd9e8cb282f775da02a40cb45cd4d92f2e21a27f9eade7572200f24b8258b0c2948ac1bad68664581bddbc6711fb0400995749b53c763a17adad2d6d70d84348d6ed0d676fa992d7bd8387c8783c644db56e1a771d2838e14eef5418732b403b9f9832685a583d97a9453e27026c94ad6de32d76683c1a3d4d8044f1cc2394e92869e378b204006af8c2bfb3ef78bbe5d39b86e1eb30809cd2687a4a65e7eee0e84748e1ec6e952086c1636ebfb2db61650676e2e9c9910ed0a72c29840792382b13030ecf650f0ef943b1ebb504b567ac08425ba67d2ff244260c2f722d8b4cd5d9224d064fa361083dd9ef8a9da9312ab0515062df6f170235ea992e6da0fe3746900cfb766fbbe947bdaae001fad74a34d76049c9eb38aa49d7b1077acf8b205b21d1c7f25ffcf988f4f1113a61af48e5df7b4c9e94db07d4c2607b9e94367137534d64c17f9d977fc14bc1ce928f49a79d555ef82dd08cb35a53504f4734ec65b41b7236aaad2934f69168a486db4a7a7c2a5b08e9a46dc6d2c4a6f6ae1e0a83e5ecfbbb9ead5957cd6ee46add67f7ed1c72b40eda1ff8dcad06ef624b84d6ba54ac4cb1cb751b1054d4a12f810900eb83dd05c860669c495cfd724e0ccc4f50f81e494e588f86231", 0x1000}], 0x1, &(0x7f0000001b40)=[@op={0x18}, @iv={0x98, 0x117, 0x2, 0x7e, "142c3830fdbbf0950651abcc5a550dd6ac4e7e4ff517335a7eb23c9b3ff743f8da3fde8412f895141562600416caba2df8ef4fb619e34d936789cf182bcc035372889c3524a7049eeab0d577851c6a2729d9e00d8fbec3bf306c12f0c27f9f91fd7d69240ebffa74809ed3a962f590db9830343bd9ba34445da09c1ef373"}, @op={0x18}], 0xc8, 0x20004841}, {0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000001c40)="48967a728396e6", 0x7}, {&(0x7f0000001c80)="542c9699dccbe2b7088ea19772b561c2542a0cf50f5822a2de4cfaaf747755449226335d33c4a76c53e3737a3a444f5547c2c56e697a370a5154353a000e2e12171d475a30a646f38d7ffe15b10a14353ee25435009bbca606f5a16eb6aaf7cd7604a538ba60fcb14d4f1b7639678c3a7d88bf1adcc45bf8fae721c4afe484c974c1dfb51ca4d799bd91d86dc1c10fcd160ae22c474a9a48e39041cc78b16b84f956c709dd5a28dc7b8d0d8b0b81485cb9f9a463783070426254e9412a96fcabd6d1fa29fd236e51b5e598e53a6f83e64f048c338ded02adb7a34e14b07eaf78fbbdd189a1579a834c1a1e6c8410", 0xee}, {&(0x7f0000001d80)="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", 0x1000}, {&(0x7f0000002d80)="e5c311100d11783bb40f2a0bb1167dc797429c827d0fd367e0f7efe7cf222a344963dbce9336661c4ae292824852b2d1234e2714735593350727029a7583989d5f7a2a02f51a20b5793a07d1cf0a6529bcade3b17981abb9327529d4c6ad20fd1d", 0x61}], 0x4, 0x0, 0x0, 0x40}], 0x2, 0x10) getsockopt$packet_int(r1, 0x107, 0x3, &(0x7f0000002ec0), &(0x7f0000002f00)=0x4) [ 272.472644] ? ip_rt_multicast_event+0xa0/0xa0 [ 272.477393] ? ip_rt_multicast_event+0xa0/0xa0 [ 272.482061] rtnetlink_rcv_msg+0xce9/0x1550 [ 272.486449] ? kmsan_internal_poison_shadow+0x92/0x150 [ 272.491820] ? __msan_poison_alloca+0x1f0/0x2a0 [ 272.496664] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 272.501942] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 272.507474] ? should_fail+0x191/0xb20 [ 272.511453] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 272.516991] netlink_rcv_skb+0x431/0x620 [ 272.521178] ? rtnetlink_bind+0x120/0x120 01:18:21 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 272.525437] rtnetlink_rcv+0x50/0x60 [ 272.529886] netlink_unicast+0xf3e/0x1020 [ 272.534130] netlink_sendmsg+0x127f/0x1300 [ 272.538630] ___sys_sendmsg+0xdb9/0x11b0 [ 272.542888] ? netlink_getsockopt+0x1460/0x1460 [ 272.547662] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 272.552958] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 272.558554] ? __fget_light+0x6e1/0x750 [ 272.562620] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 272.568596] __se_sys_sendmsg+0x305/0x460 [ 272.572857] __x64_sys_sendmsg+0x4a/0x70 [ 272.577010] do_syscall_64+0xbc/0xf0 [ 272.580830] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 272.586117] RIP: 0033:0x457f29 [ 272.589372] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 272.609959] RSP: 002b:00007fcb727e7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.617753] RAX: ffffffffffffffda RBX: 00007fcb727e7c90 RCX: 0000000000457f29 [ 272.625613] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000003 [ 272.632948] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 272.640377] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcb727e86d4 [ 272.647991] R13: 00000000004c4f20 R14: 00000000004d8c88 R15: 0000000000000004 [ 272.656264] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 273.036411] IPVS: ftp: loaded support on port[0] = 21 [ 273.134082] chnl_net:caif_netlink_parms(): no params data found [ 273.179882] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.186523] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.194927] device bridge_slave_0 entered promiscuous mode [ 273.203599] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.210018] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.218098] device bridge_slave_1 entered promiscuous mode [ 273.242606] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 273.254157] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 273.279064] team0: Port device team_slave_0 added [ 273.286554] team0: Port device team_slave_1 added [ 273.365472] device hsr_slave_0 entered promiscuous mode [ 273.402382] device hsr_slave_1 entered promiscuous mode [ 273.457113] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.463773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.470680] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.477283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.533894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.550417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 273.559313] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.567611] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.577168] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 273.593796] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.606412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 273.614803] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.621250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.635631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 273.643979] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.651036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.679547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 273.690391] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 273.706386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 273.721132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 273.737112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 273.750231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 273.780162] 8021q: adding VLAN 0 to HW filter on device batadv0 01:18:23 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x201, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000440)='vegas\x00', 0x8377c82a1d841f) sendto$inet6(r1, &(0x7f0000000280), 0x0, 0x20000004, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r2, 0x401104000000016) 01:18:23 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:23 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 01:18:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f0000000000)={0x2, 0x5, 0x100000001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:18:23 executing program 1 (fault-call:3 fault-nth:3): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:23 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000040)={0x0, 0x2000}) r3 = epoll_create1(0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x0) close(r2) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000140)={0x5}) r4 = getpgrp(0xffffffffffffffff) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000100)=r4) write(r1, &(0x7f0000000340), 0x10000014c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x43d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x7, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r5+30000000}, &(0x7f0000000300)={0x0}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_dccp_buf(r1, 0x21, 0xcd, &(0x7f0000000180)=""/111, &(0x7f0000000280)=0x6f) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 274.697058] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 274.704898] FAULT_INJECTION: forcing a failure. [ 274.704898] name failslab, interval 1, probability 0, space 0, times 0 [ 274.716421] CPU: 1 PID: 11829 Comm: syz-executor.1 Not tainted 5.0.0+ #11 [ 274.723399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.732800] Call Trace: [ 274.735468] dump_stack+0x173/0x1d0 [ 274.739160] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 274.744426] should_fail+0xa19/0xb20 [ 274.748249] __should_failslab+0x278/0x2a0 [ 274.752565] should_failslab+0x29/0x70 [ 274.756536] __kmalloc_node_track_caller+0x202/0xff0 [ 274.761722] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 274.767168] ? kmem_cache_alloc_node+0x1d2/0xc20 [ 274.772250] ? inet_rtm_getroute+0xac7/0x4210 [ 274.776814] ? inet_rtm_getroute+0xac7/0x4210 [ 274.781374] __alloc_skb+0x309/0xa20 [ 274.785158] ? inet_rtm_getroute+0xac7/0x4210 [ 274.789728] inet_rtm_getroute+0xac7/0x4210 01:18:23 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 274.794132] ? is_bpf_text_address+0x3c5/0x4b0 [ 274.798835] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 274.804401] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 274.809772] ? ip_rt_multicast_event+0xa0/0xa0 [ 274.814811] ? ip_rt_multicast_event+0xa0/0xa0 [ 274.819499] rtnetlink_rcv_msg+0xce9/0x1550 [ 274.823912] ? kmsan_internal_poison_shadow+0x92/0x150 [ 274.829296] ? __msan_poison_alloca+0x1f0/0x2a0 [ 274.834066] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 274.839352] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 274.844893] ? should_fail+0x191/0xb20 [ 274.848895] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 274.854273] netlink_rcv_skb+0x431/0x620 [ 274.858417] ? rtnetlink_bind+0x120/0x120 [ 274.862657] rtnetlink_rcv+0x50/0x60 [ 274.866484] netlink_unicast+0xf3e/0x1020 [ 274.870734] netlink_sendmsg+0x127f/0x1300 [ 274.875086] ___sys_sendmsg+0xdb9/0x11b0 [ 274.879225] ? netlink_getsockopt+0x1460/0x1460 [ 274.884002] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 274.889294] ? __msan_metadata_ptr_for_load_1+0x10/0x20 01:18:24 executing program 0: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x7, 0x8, 0x5, 0x0, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}}}, &(0x7f00000000c0)=0x84) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = msgget(0x1, 0x272) msgsnd(r5, &(0x7f0000000340)=ANY=[], 0x0, 0x801) rt_sigreturn() syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) recvfrom$inet(r0, &(0x7f0000000280), 0x0, 0x40000023, &(0x7f0000000300)={0x2, 0x4e20, @multicast2}, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, r6, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffffd}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @loopback}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x884}, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10001}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x8c, r7, 0x303, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x94f7}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x29}}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4) eventfd(0xffff) socket$inet_tcp(0x2, 0x1, 0x0) [ 274.894997] ? __fget_light+0x6e1/0x750 [ 274.899084] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 274.904380] __se_sys_sendmsg+0x305/0x460 [ 274.908632] __x64_sys_sendmsg+0x4a/0x70 [ 274.912775] do_syscall_64+0xbc/0xf0 [ 274.916572] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 274.921817] RIP: 0033:0x457f29 [ 274.925068] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 274.944205] RSP: 002b:00007fcb72808c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.951985] RAX: ffffffffffffffda RBX: 00007fcb72808c90 RCX: 0000000000457f29 [ 274.959317] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000004 [ 274.966915] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 274.974358] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcb728096d4 [ 274.981884] R13: 00000000004c4f20 R14: 00000000004d8c88 R15: 0000000000000005 01:18:24 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 274.991016] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 275.052079] hrtimer: interrupt took 33831 ns 01:18:24 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x80}}, 0x0) 01:18:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000000)=0x100000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000040)={'yam0\x00', {0x2, 0x4e24, @local}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:18:24 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) read(r0, 0x0, 0x0) 01:18:24 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:24 executing program 1 (fault-call:3 fault-nth:4): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:24 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x80}}, 0x0) [ 275.588031] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 275.596729] FAULT_INJECTION: forcing a failure. [ 275.596729] name failslab, interval 1, probability 0, space 0, times 0 [ 275.608179] CPU: 0 PID: 11866 Comm: syz-executor.1 Not tainted 5.0.0+ #11 [ 275.615174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 275.624668] Call Trace: [ 275.627367] dump_stack+0x173/0x1d0 [ 275.631109] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 275.636378] should_fail+0xa19/0xb20 [ 275.640183] __should_failslab+0x278/0x2a0 [ 275.644504] should_failslab+0x29/0x70 [ 275.648740] kmem_cache_alloc+0xff/0xb60 [ 275.652863] ? dst_alloc+0x28f/0x870 [ 275.656629] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 275.662072] dst_alloc+0x28f/0x870 [ 275.665706] ip_route_output_key_hash_rcu+0x22e8/0x3ba0 [ 275.671255] inet_rtm_getroute+0x1950/0x4210 [ 275.675741] ? is_bpf_text_address+0x3c5/0x4b0 [ 275.680430] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 275.686016] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 275.691300] ? ip_rt_multicast_event+0xa0/0xa0 [ 275.695959] ? ip_rt_multicast_event+0xa0/0xa0 [ 275.700625] rtnetlink_rcv_msg+0xce9/0x1550 [ 275.705024] ? kmsan_internal_poison_shadow+0x92/0x150 [ 275.710408] ? __msan_poison_alloca+0x1f0/0x2a0 [ 275.715157] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 275.720432] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 275.725978] ? should_fail+0x191/0xb20 [ 275.729963] ? kmsan_get_shadow_origin_ptr+0x60/0x440 01:18:24 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000001c0)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\x03\x00\x00\x00\xef\x00\x00\x03\xff\x02\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x06\x00', 0xc7, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x2000000080003, 0x0) close(r1) 01:18:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup3(r3, r1, 0x80000) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) setsockopt$inet6_buf(r4, 0x29, 0xd3, &(0x7f0000000300)="5167f6d0cfd224a1d7f11b69a9f60c499b82787f6fac8da3c697ff48eb9f0a9535d40bd28437d76afed06ffb3146dd75a785f7b076c9a2dfb86eab7a2ef98573ddec103ee60d0d3b18ce60a03b89dc26d241ea8e4eb22334743461f25d3bcf8dce287c72f62abacb8b067bc04475fb1eb6b5883d59ff10e6f7da133fd6bc5a7a", 0x80) ioctl$CAPI_GET_SERIAL(r4, 0xc0044308, &(0x7f0000000380)=0x8) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[], 0x0, 0x200}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000240)=0x7) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400000, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="000027bd7000fbdbdf25110000000c000200080008000800000008000600f9ffffff08000600050000000800040002000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 275.735365] netlink_rcv_skb+0x431/0x620 [ 275.739505] ? rtnetlink_bind+0x120/0x120 [ 275.743754] rtnetlink_rcv+0x50/0x60 [ 275.747544] netlink_unicast+0xf3e/0x1020 [ 275.751949] netlink_sendmsg+0x127f/0x1300 [ 275.756298] ___sys_sendmsg+0xdb9/0x11b0 [ 275.760443] ? netlink_getsockopt+0x1460/0x1460 [ 275.766246] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 275.771598] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 275.777043] ? __fget_light+0x6e1/0x750 [ 275.781125] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 275.786393] __se_sys_sendmsg+0x305/0x460 [ 275.790635] __x64_sys_sendmsg+0x4a/0x70 [ 275.795119] do_syscall_64+0xbc/0xf0 [ 275.798909] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 275.804145] RIP: 0033:0x457f29 [ 275.807391] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 275.826448] RSP: 002b:00007fcb72808c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.834250] RAX: ffffffffffffffda RBX: 00007fcb72808c90 RCX: 0000000000457f29 [ 275.841829] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000004 [ 275.849331] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 275.856660] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcb728096d4 [ 275.863988] R13: 00000000004c4f20 R14: 00000000004d8c88 R15: 0000000000000005 [ 275.871695] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 275.876428] binder: 11871:11876 transaction failed 29189/-22, size 0-0 line 2896 01:18:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/190, 0xbe}, {&(0x7f00000001c0)=""/221, 0xdd}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)=@known='trusted.syz\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000001380)={@hyper}) [ 275.954194] binder: 11871:11883 ERROR: BC_REGISTER_LOOPER called without request [ 275.962279] binder: 11871:11883 transaction failed 29189/-22, size 0-0 line 2896 01:18:25 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x80}}, 0x0) [ 276.020689] binder: undelivered TRANSACTION_ERROR: 29189 [ 276.037474] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns 01:18:25 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x2b1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) 01:18:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:25 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) 01:18:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x53794fa7, 0x30, 0x80000000, 0x7}, &(0x7f0000000080)=0x18) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r2, 0x40000000000, 0x6}, 0xc) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 276.314498] binder: 11897:11898 transaction failed 29189/-22, size 0-0 line 2896 [ 276.345960] binder: 11897:11898 ERROR: BC_REGISTER_LOOPER called without request [ 276.354010] binder: 11897:11898 transaction failed 29189/-22, size 0-0 line 2896 01:18:25 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 276.422644] binder: undelivered TRANSACTION_ERROR: 29189 01:18:25 executing program 1 (fault-call:3 fault-nth:5): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:25 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) 01:18:25 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 276.753314] binder: 11914:11917 transaction failed 29189/-22, size 0-0 line 2896 [ 276.772185] binder: 11914:11917 ERROR: BC_REGISTER_LOOPER called without request [ 276.779853] binder: 11914:11917 transaction failed 29189/-22, size 0-0 line 2896 [ 276.853959] binder: undelivered TRANSACTION_ERROR: 29189 [ 276.981455] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 276.989720] FAULT_INJECTION: forcing a failure. [ 276.989720] name failslab, interval 1, probability 0, space 0, times 0 [ 277.001721] CPU: 0 PID: 11929 Comm: syz-executor.1 Not tainted 5.0.0+ #11 [ 277.008733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 277.018149] Call Trace: [ 277.020838] dump_stack+0x173/0x1d0 [ 277.024549] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 277.029899] should_fail+0xa19/0xb20 [ 277.033654] __should_failslab+0x278/0x2a0 [ 277.038008] should_failslab+0x29/0x70 [ 277.041929] kmem_cache_alloc_node+0x123/0xc20 [ 277.046637] ? __alloc_skb+0x218/0xa20 [ 277.050540] ? kmsan_internal_poison_shadow+0x92/0x150 [ 277.055842] __alloc_skb+0x218/0xa20 [ 277.059580] netlink_ack+0x573/0x1110 [ 277.063513] netlink_rcv_skb+0x316/0x620 [ 277.067597] ? rtnetlink_bind+0x120/0x120 [ 277.071779] rtnetlink_rcv+0x50/0x60 [ 277.076268] netlink_unicast+0xf3e/0x1020 [ 277.080489] netlink_sendmsg+0x127f/0x1300 [ 277.084765] ___sys_sendmsg+0xdb9/0x11b0 [ 277.088858] ? netlink_getsockopt+0x1460/0x1460 [ 277.093567] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 277.098779] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 277.104167] ? __fget_light+0x6e1/0x750 [ 277.108171] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 277.113472] __se_sys_sendmsg+0x305/0x460 [ 277.117654] __x64_sys_sendmsg+0x4a/0x70 [ 277.121742] do_syscall_64+0xbc/0xf0 [ 277.125489] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 277.130778] RIP: 0033:0x457f29 [ 277.134182] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 277.153222] RSP: 002b:00007fcb72808c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.160959] RAX: ffffffffffffffda RBX: 00007fcb72808c90 RCX: 0000000000457f29 [ 277.168250] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000004 [ 277.175540] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 277.182837] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcb728096d4 [ 277.190115] R13: 00000000004c4f20 R14: 00000000004d8c88 R15: 0000000000000005 [ 277.197808] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:26 executing program 5: r0 = socket(0x40000000015, 0x805, 0x0) syz_open_dev$sndtimer(0x0, 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f00000001c0)) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000480), 0x8) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000000180)) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r4 = syz_open_dev$vbi(0x0, 0x1, 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000040)) unshare(0x40000000) fchmodat(r3, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) sendto$inet(r2, &(0x7f00000004c0)="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", 0xf9e, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x129a00, 0x0) dup3(0xffffffffffffffff, r0, 0xfffffffffffffffc) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r4, 0xc1105518, &(0x7f0000000200)={{0x4, 0x1, 0xffffffff7fffffff, 0x4, '\x00', 0x1}, 0x0, 0x0, 0xfffffffffffff801, 0x0, 0x1, 0x9, 'syz0\x00', &(0x7f0000000080)=['/dev/null\x00'], 0xa, [], [0xfff, 0x32, 0x4, 0x8000]}) 01:18:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000000)="a50f01d1eacfa58c0026f2f3d9e5362e0fc7ae00000fc729b83b010f00d80f35b8e3000f00d00f01d1", 0x29}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:18:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:26 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 01:18:26 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) [ 277.315433] binder: 11935:11936 ioctl c0306201 0 returned -14 [ 277.350661] binder: 11935:11936 transaction failed 29189/-22, size 0-0 line 2896 [ 277.374468] binder: 11935:11936 ERROR: BC_REGISTER_LOOPER called without request [ 277.382298] binder: 11935:11936 transaction failed 29189/-22, size 0-0 line 2896 01:18:26 executing program 1 (fault-call:3 fault-nth:6): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 277.422086] binder: undelivered TRANSACTION_ERROR: 29189 [ 277.539859] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 277.547678] FAULT_INJECTION: forcing a failure. [ 277.547678] name failslab, interval 1, probability 0, space 0, times 0 [ 277.559201] CPU: 0 PID: 11948 Comm: syz-executor.1 Not tainted 5.0.0+ #11 [ 277.566178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 277.575580] Call Trace: [ 277.578258] dump_stack+0x173/0x1d0 [ 277.581964] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 277.587223] should_fail+0xa19/0xb20 [ 277.591013] __should_failslab+0x278/0x2a0 [ 277.595696] should_failslab+0x29/0x70 [ 277.597360] IPVS: ftp: loaded support on port[0] = 21 [ 277.599661] __kmalloc_node_track_caller+0x202/0xff0 [ 277.609974] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 277.615414] ? kmem_cache_alloc_node+0x1d2/0xc20 [ 277.620230] ? netlink_ack+0x573/0x1110 [ 277.624274] ? netlink_ack+0x573/0x1110 [ 277.628314] __alloc_skb+0x309/0xa20 [ 277.632085] ? netlink_ack+0x573/0x1110 [ 277.636128] netlink_ack+0x573/0x1110 01:18:26 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) [ 277.640110] netlink_rcv_skb+0x316/0x620 [ 277.644263] ? rtnetlink_bind+0x120/0x120 [ 277.648999] rtnetlink_rcv+0x50/0x60 [ 277.652780] netlink_unicast+0xf3e/0x1020 [ 277.656995] netlink_sendmsg+0x127f/0x1300 [ 277.661311] ___sys_sendmsg+0xdb9/0x11b0 [ 277.665429] ? netlink_getsockopt+0x1460/0x1460 [ 277.670169] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 277.675423] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 277.680845] ? __fget_light+0x6e1/0x750 [ 277.684896] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 277.690151] __se_sys_sendmsg+0x305/0x460 [ 277.694384] __x64_sys_sendmsg+0x4a/0x70 [ 277.698512] do_syscall_64+0xbc/0xf0 [ 277.702294] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 277.707532] RIP: 0033:0x457f29 [ 277.710781] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 277.729836] RSP: 002b:00007fcb72808c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.737618] RAX: ffffffffffffffda RBX: 00007fcb72808c90 RCX: 0000000000457f29 [ 277.744937] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000004 [ 277.752266] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 277.759586] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcb728096d4 [ 277.767890] R13: 00000000004c4f20 R14: 00000000004d8c88 R15: 0000000000000005 [ 277.775411] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 277.794310] IPVS: ftp: loaded support on port[0] = 21 01:18:26 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x68}}, 0x0) 01:18:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000000)=""/91, 0x5b}, {&(0x7f0000000080)=""/121, 0x79}, {&(0x7f00000001c0)=""/169, 0xa9}, {&(0x7f0000001300)=""/231, 0xe7}], 0x5, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 277.930691] binder: 11958:11960 ioctl c0306201 0 returned -14 01:18:27 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) [ 277.977719] binder: 11958:11964 transaction failed 29189/-22, size 0-0 line 2896 [ 278.034400] binder: 11958:11968 ERROR: BC_REGISTER_LOOPER called without request [ 278.042434] binder: 11958:11968 transaction failed 29189/-22, size 0-0 line 2896 [ 278.054513] binder: undelivered TRANSACTION_ERROR: 29189 01:18:27 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="245c35705f1f"}, 0x14) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x1000000000000020, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x80, 0x0) 01:18:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:27 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x68}}, 0x0) 01:18:27 executing program 1 (fault-call:3 fault-nth:7): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:27 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) [ 278.334916] binder: 11978:11981 ioctl c0306201 0 returned -14 [ 278.363214] binder: 11978:11981 transaction failed 29189/-22, size 0-0 line 2896 [ 278.404734] binder: 11978:11981 ERROR: BC_REGISTER_LOOPER called without request [ 278.435767] binder: undelivered TRANSACTION_ERROR: 29189 01:18:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xffffffd) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0xc00) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:18:27 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x68}}, 0x0) [ 278.494596] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 278.572777] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 278.581544] FAULT_INJECTION: forcing a failure. [ 278.581544] name failslab, interval 1, probability 0, space 0, times 0 [ 278.593213] CPU: 1 PID: 11992 Comm: syz-executor.1 Not tainted 5.0.0+ #11 [ 278.600889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.610379] Call Trace: [ 278.613074] dump_stack+0x173/0x1d0 [ 278.616792] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 278.622080] should_fail+0xa19/0xb20 [ 278.625874] __should_failslab+0x278/0x2a0 [ 278.630184] should_failslab+0x29/0x70 [ 278.634150] kmem_cache_alloc_node+0x123/0xc20 [ 278.638767] ? __alloc_skb+0x218/0xa20 [ 278.642794] __alloc_skb+0x218/0xa20 [ 278.646537] netlink_ack+0x573/0x1110 [ 278.650372] netlink_rcv_skb+0x316/0x620 [ 278.654496] ? rtnetlink_bind+0x120/0x120 [ 278.658687] rtnetlink_rcv+0x50/0x60 [ 278.662447] netlink_unicast+0xf3e/0x1020 [ 278.666622] netlink_sendmsg+0x127f/0x1300 [ 278.670908] ___sys_sendmsg+0xdb9/0x11b0 [ 278.674986] ? netlink_getsockopt+0x1460/0x1460 [ 278.679684] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 278.684914] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 278.690307] ? __fget_light+0x6e1/0x750 [ 278.694394] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 278.699612] __se_sys_sendmsg+0x305/0x460 [ 278.703797] __x64_sys_sendmsg+0x4a/0x70 [ 278.707880] do_syscall_64+0xbc/0xf0 [ 278.711621] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 278.716827] RIP: 0033:0x457f29 [ 278.720043] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 278.738968] RSP: 002b:00007fcb727c6c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.746701] RAX: ffffffffffffffda RBX: 00007fcb727c6c90 RCX: 0000000000457f29 [ 278.753990] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000003 [ 278.761271] RBP: 000000000073c040 R08: 0000000000000000 R09: 0000000000000000 01:18:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:27 executing program 5: openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000002200010000000000000100000400000048001100e2abb4ec7645192056d52f8d136f699d897bdabf4fd3c08e579e5253c2081c92cacb9693e7bb692f4ba15133ce6266b2a62bbacd9d21aa000000"], 0x1}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 278.769025] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcb727c76d4 [ 278.776312] R13: 00000000004c4f20 R14: 00000000004d8c88 R15: 0000000000000004 01:18:27 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) [ 278.882626] binder: 12000:12001 ERROR: BC_REGISTER_LOOPER called without request [ 278.935013] binder: undelivered TRANSACTION_ERROR: 29189 01:18:28 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 01:18:28 executing program 1 (fault-call:3 fault-nth:8): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:28 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21e7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:18:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 279.210534] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 279.218559] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 279.227344] FAULT_INJECTION: forcing a failure. [ 279.227344] name failslab, interval 1, probability 0, space 0, times 0 [ 279.238697] CPU: 0 PID: 12017 Comm: syz-executor.1 Not tainted 5.0.0+ #11 [ 279.245677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 279.255164] Call Trace: 01:18:28 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) [ 279.257839] dump_stack+0x173/0x1d0 [ 279.261541] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 279.266794] should_fail+0xa19/0xb20 [ 279.270582] __should_failslab+0x278/0x2a0 [ 279.274886] should_failslab+0x29/0x70 [ 279.278861] __kmalloc_node_track_caller+0x202/0xff0 [ 279.284032] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 279.289740] ? kmem_cache_alloc_node+0x1d2/0xc20 [ 279.294554] ? netlink_ack+0x573/0x1110 [ 279.298588] ? netlink_ack+0x573/0x1110 [ 279.302620] __alloc_skb+0x309/0xa20 [ 279.306392] ? netlink_ack+0x573/0x1110 [ 279.310438] netlink_ack+0x573/0x1110 [ 279.314322] netlink_rcv_skb+0x316/0x620 [ 279.318450] ? rtnetlink_bind+0x120/0x120 [ 279.322682] rtnetlink_rcv+0x50/0x60 [ 279.326460] netlink_unicast+0xf3e/0x1020 [ 279.330683] netlink_sendmsg+0x127f/0x1300 [ 279.335008] ___sys_sendmsg+0xdb9/0x11b0 [ 279.339145] ? netlink_getsockopt+0x1460/0x1460 [ 279.343886] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 279.349151] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 279.354585] ? __fget_light+0x6e1/0x750 [ 279.358633] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 279.363896] __se_sys_sendmsg+0x305/0x460 [ 279.368371] __x64_sys_sendmsg+0x4a/0x70 [ 279.372495] do_syscall_64+0xbc/0xf0 [ 279.376285] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 279.381522] RIP: 0033:0x457f29 [ 279.384767] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 279.403720] RSP: 002b:00007fcb72808c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.411581] RAX: ffffffffffffffda RBX: 00007fcb72808c90 RCX: 0000000000457f29 [ 279.416879] binder: 12024:12025 ERROR: BC_REGISTER_LOOPER called without request [ 279.418894] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000004 [ 279.418918] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 279.418941] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcb728096d4 [ 279.418963] R13: 00000000004c4f20 R14: 00000000004d8c88 R15: 0000000000000005 01:18:28 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 01:18:28 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) [ 279.589319] binder: undelivered TRANSACTION_ERROR: 29189 01:18:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x68, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:18:28 executing program 1 (fault-call:3 fault-nth:9): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:29 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) [ 279.920537] binder: 12043:12044 ERROR: BC_REGISTER_LOOPER called without request 01:18:29 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) 01:18:29 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000003c0)={0x8000, 0x10, 0x8000}, 0x3c3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r1, r2, &(0x7f0000000140), 0xde) fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64MMAP\x00', &(0x7f0000000040)='cgroup+\x00', 0x8, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=ANY=[], &(0x7f0000000380)='\x00', 0x11d, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000440)) syz_extract_tcp_res$synack(&(0x7f00000002c0)={0x41424344, 0x41424344}, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890c, &(0x7f0000000080)={0x750, {0x2, 0x4e20, @empty}, {0x2, 0x4e24, @loopback}, {0x2, 0x4, @empty}, 0xfd, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xfdffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) prctl$PR_GET_SECUREBITS(0x1b) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0xffffffffffffffff, 0x0) r8 = syz_open_procfs(r7, &(0x7f0000000780)='uid\x00\x00\x00\x00\xbc\xa5\x8c\xc4\xf1\xa65\x99\x1aX\xfd\xb1bz\x03r\x00') setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000740)=@req3={0x101, 0xfffffffffffffffa, 0x0, 0x0, 0x8000, 0x6, 0x5}, 0x103bb) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000700)='./file0\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYPTR=&(0x7f00000008c0)=ANY=[@ANYPTR=&(0x7f00000007c0)=ANY=[@ANYBLOB="c841ab168855073dbd641dc751217750481ea3dc876bbe66091fcd2065099fd22bc4104c97e3de8f0729d92606ce0732a735da184464ad2dfa290e21d2ff6ccfff345dd28e705c94b220dca9c2a9acc1f3a6e9dd7ae3bee9bbccfda8e38fc0d5061a4be01dfb87da15482a1e6690dd3d83fff340030f8eac1266b7be4e3f340df8b5a45fb498c34a4651cc5d51c966e165d41d270937202f7891027cb180b7b7a87e80e2a0e42ae46f530444f9c19b5c2f5215c6b2bedeef01fa6f27f38025dbf37ada1d592a6c54e7ecc40ee947", @ANYRES32=r6]]], 0x8}}, 0x0) fcntl$setsig(r3, 0xa, 0x35) r9 = socket$key(0xf, 0x3, 0x2) sendmmsg(r9, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x0, 0x70, 0x401, 0x45b, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9, 0x0, 0x0, 0x0, 0xffffffff, 0x8001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff3d6, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000540)={0x4, 0x200000000000, 0x1}, 0xc) tee(r9, r3, 0x6, 0x6) fcntl$setown(r5, 0x8, r7) [ 279.994025] binder: undelivered TRANSACTION_ERROR: 29189 [ 280.046981] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 280.054912] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:29 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) 01:18:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9, 0x802) sendmsg$nl_netfilter(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x9c, 0x0, 0x9, 0x520, 0x7, 0x25dfdbfe, {0xf, 0x0, 0x4}, [@typed={0x4, 0xa}, @typed={0xc, 0x82, @u64=0x7b2}, @typed={0x70, 0x51, @binary="16ff57b697812a17b4b5875e0e09bae38827bfa085583c9bb9c96829eb74ee0e2da9fa9ddf35d44c84473e079fd711ac6d8f8504689051a9c6bf43f12c143083d4fcb1a24d209285f1f55a9a86512dc39f0963498785d391d95f237cacc7c72125376abe178faa4fe5"}, @typed={0x8, 0x7b, @fd=r0}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:29 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) [ 280.322297] protocol 88fb is buggy, dev hsr_slave_0 [ 280.329083] protocol 88fb is buggy, dev hsr_slave_1 [ 280.338749] binder: 12061:12062 ERROR: BC_REGISTER_LOOPER called without request [ 280.387366] binder: undelivered TRANSACTION_ERROR: 29189 [ 280.402252] protocol 88fb is buggy, dev hsr_slave_0 [ 280.408019] protocol 88fb is buggy, dev hsr_slave_1 01:18:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r3 = dup(r0) mkdirat$cgroup(r3, &(0x7f0000000000)='syz1\x00', 0x1ff) [ 280.452014] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 280.459952] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x2, 0x0) r2 = getpgid(0xffffffffffffffff) write$P9_RGETLOCK(r1, &(0x7f00000000c0)={0x54, 0x37, 0x2, {0x0, 0x4, 0x100, r2, 0x36, 'wlan1em1nodev@bdev-$eth0posix_acl_access}wlan0{bdev\xf4lo'}}, 0x54) r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:29 executing program 5: syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) close(r0) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x10200000006}]}) ioctl$TUNSETOFFLOAD(r0, 0xc0182101, 0x70a000) 01:18:29 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) 01:18:29 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) [ 280.837211] binder: undelivered TRANSACTION_ERROR: 29189 01:18:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 280.971390] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 280.980846] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) lseek(r1, 0x2, 0x0) [ 281.070149] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 281.078784] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 281.098299] binder_transaction: 11 callbacks suppressed [ 281.098337] binder: 12100:12102 transaction failed 29189/-22, size 0-0 line 2896 [ 281.121264] kauditd_printk_skb: 3 callbacks suppressed [ 281.121297] audit: type=1326 audit(1552439910.177:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12091 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad8a code=0x0 01:18:30 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) [ 281.179195] binder_thread_write: 1 callbacks suppressed [ 281.179217] binder: 12100:12105 ERROR: BC_REGISTER_LOOPER called without request [ 281.193187] binder: 12100:12105 transaction failed 29189/-22, size 0-0 line 2896 01:18:30 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) [ 281.281127] binder: undelivered TRANSACTION_ERROR: 29189 01:18:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x840b84b0674b73e8, 0x1, 0x10000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 281.468791] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 281.476952] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:30 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0), 0x8) 01:18:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(0xffffffffffffffff, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x8}, {}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) [ 281.549723] binder: 12120:12121 ERROR: BC_REGISTER_LOOPER called without request 01:18:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) setsockopt(r0, 0x9, 0x3e, &(0x7f0000000000)="871fcf53dd4d0454927509e824f063be710b2cd489107ddf26258dffa112ebfef04fb23f5fb955a448bfc5ac25b5e50b5a5d0b46806cbde12fa21803666e0b9702f8f99a8e06b9374d16c0c0b7640214a1b1ae0a6af5219da189fcbae3c898c1aebd982535328e26ea9e95fffa83c6b6af65cff95ae799c248beaff8", 0x7c) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 281.646495] binder: 12120:12121 transaction failed 29189/-22, size 0-0 line 2896 [ 281.679814] audit: type=1326 audit(1552439910.737:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12091 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad8a code=0x0 [ 281.724706] binder: 12120:12125 ERROR: BC_REGISTER_LOOPER called without request [ 281.732623] binder: 12120:12125 transaction failed 29189/-22, size 0-0 line 2896 01:18:31 executing program 5: socket(0x40000000015, 0x805, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x49) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000480), 0x8) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000000180)) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000040)) unshare(0x40000000) fchmodat(r1, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000004c0)="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", 0xf8c, 0x0, 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffc) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000200)={{0x4, 0x0, 0xffffffff7fffffff, 0x4, '\x00', 0x1}, 0x0, 0x6, 0xfffffffffffff801, 0x0, 0x0, 0x9, 'syz0\x00', 0x0, 0x0, [], [0x0, 0x32, 0x4, 0x8000]}) 01:18:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x0, 0x2) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000000000000d000000ff0100000100008006000000070000000000000057fd275b6c797371c3a7519de67c2889d54b2bb45051e1e54f70fa393a7211eccca3a1c5687b1bc4a47f5e6f973700c44552cd322aeab9eb247ad73fab52ed2dd25f050c"]) ioctl(r0, 0x80000000, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = socket$inet(0x10, 0x5, 0xfffffffffffff80b) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)={0xffffffffffffff01}) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:31 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000500)='t\n_\x8a\x06^r\xa7\xf5\x16u\f#S\xbfM\x92\a\x9f', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) 01:18:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(0xffffffffffffffff, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x8}, {}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) [ 282.054998] binder: 12140:12145 ERROR: BC_REGISTER_LOOPER called without request [ 282.124590] binder: 12140:12145 transaction failed 29189/-22, size 0-0 line 2896 [ 282.159288] binder: 12140:12145 ERROR: BC_REGISTER_LOOPER called without request [ 282.167379] binder: 12140:12145 transaction failed 29189/-22, size 0-0 line 2896 01:18:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x84102, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000540)='/dev/input/mouse#\x00', 0x3, 0x28cc00) setsockopt$sock_void(r1, 0x1, 0x1b, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@local, @in6=@remote}}, {{@in6=@empty}}}, &(0x7f0000000200)=0xe8) openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x200100, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x80000) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000240)={0x0, 0x5}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000400)={r6, 0x3, 0x4, 0x401}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000440)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000000)=0xfffffdc1) connect$can_bcm(r2, &(0x7f0000008f40)={0x1d, r7}, 0x10) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) setsockopt$inet6_udp_int(r1, 0x11, 0x6f, &(0x7f0000000580)=0x5347, 0x4) ioctl$KVM_RUN(r8, 0xae80, 0x0) 01:18:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = dup2(r0, r0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(0xffffffffffffffff, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x8}, {}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) [ 282.190187] binder_release_work: 1 callbacks suppressed [ 282.190203] binder: undelivered TRANSACTION_ERROR: 29189 [ 282.247646] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 282.255756] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:31 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000003c0)={0x8000, 0x10, 0x8000}, 0x3c3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r1, r2, &(0x7f0000000140), 0xde) fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64MMAP\x00', &(0x7f0000000040)='cgroup+\x00', 0x8, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=ANY=[], &(0x7f0000000380)='\x00', 0x11d, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000440)) syz_extract_tcp_res$synack(&(0x7f00000002c0)={0x41424344, 0x41424344}, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x4e20, @empty}, {0x2, 0x4e24, @loopback}, {0x2, 0x4, @empty}, 0xfd, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0x0, 0x0, 0x28c, 0x0, 0xfffffffffffffffc}) prctl$PR_GET_SECUREBITS(0x1b) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0xffffffffffffffff, 0x0) r8 = syz_open_procfs(r7, &(0x7f0000000780)='uid\x00\x00\x00\x00\xbc\xa5\x8c\xc4\xf1\xa65\x99\x1aX\xfd\xb1bz\x03r\x00') setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000740)=@req3={0x101, 0xfffffffffffffffa, 0x0, 0x0, 0x8000, 0x6, 0x5}, 0x103bb) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000700)='./file0\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYPTR=&(0x7f00000008c0)=ANY=[@ANYPTR=&(0x7f00000007c0)=ANY=[@ANYBLOB="c841ab168855073dbd641dc751217750481ea3dc876bbe66091fcd2065099fd22bc4104c97e3de8f0729d92606ce0732a735da184464ad2dfa290e21d2ff6ccfff345dd28e705c94b220dca9c2a9acc1f3a6e9dd7ae3bee9bbccfda8e38fc0d5061a4be01dfb87da15482a1e6690dd3d83fff340030f8eac1266b7be4e3f340df8b5a45fb498c34a4651cc5d51c966e165d41d270937202f7891027cb180b7b7a87e80e2a0e42ae46f530444f9c19b5c2f5215c6b2bedeef01fa6f27f38025dbf37ada1d592a6c54e7ecc40ee947", @ANYRES32=r6]]], 0x8}}, 0x0) fcntl$setsig(r3, 0xa, 0x35) r9 = socket$key(0xf, 0x3, 0x2) sendmmsg(r9, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x0, 0x70, 0x401, 0x45b, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9, 0x0, 0x0, 0x0, 0xffffffff, 0x8001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff3d6, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000540)={0x4, 0x200000000000, 0x1}, 0xc) tee(r9, r3, 0x6, 0x6) fcntl$setown(r5, 0x8, r7) [ 282.463518] binder: 12174:12175 ERROR: BC_REGISTER_LOOPER called without request [ 282.482589] protocol 88fb is buggy, dev hsr_slave_0 [ 282.488221] protocol 88fb is buggy, dev hsr_slave_1 01:18:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1813) r2 = socket$inet(0x10, 0x2, 0x8) sendmsg(r2, &(0x7f0000000400)={0x0, 0x280, &(0x7f0000000340)=[{&(0x7f0000000000)="240000001a0007041dfffd946f610500020000001f000000002028006ac5bfdce8a09200001100ffffba16a0aa1c090000000000eff24d8238cfa47e23f706c05400000000000000000000", 0x4b}], 0x1}, 0x0) [ 282.528749] binder: 12174:12175 transaction failed 29189/-22, size 0-0 line 2896 01:18:31 executing program 4: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) [ 282.572086] binder: 12174:12176 ERROR: BC_REGISTER_LOOPER called without request [ 282.579818] binder: 12174:12176 transaction failed 29189/-22, size 0-0 line 2896 [ 282.690466] binder: undelivered TRANSACTION_ERROR: 29189 01:18:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070") socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r2, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x5452, &(0x7f0000000380)) 01:18:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:18:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xffffffffffffffff, 0x8000) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000180)={0xffffffffffff0000, 0x530, 0x8bd5, 0x400}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = socket(0x1, 0x80800, 0x1) recvfrom$rxrpc(r3, &(0x7f00000000c0)=""/187, 0xbb, 0x20, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000001c0)=0x7, 0x4) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:32 executing program 4: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) 01:18:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) [ 283.444071] binder: 12198:12199 ERROR: BC_REGISTER_LOOPER called without request [ 283.460688] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 283.468809] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x800) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2d, 'cpu'}, {0x2f, 'pids'}, {0x2b, 'cpu'}, {0x2f, 'io'}]}, 0x19) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 283.490613] binder: 12198:12209 ioctl 40046205 0 returned -22 [ 283.510062] binder: 12198:12199 transaction failed 29189/-22, size 0-0 line 2896 [ 283.524358] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 283.533676] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:32 executing program 2: 01:18:32 executing program 4: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) [ 283.583644] binder: 12198:12209 ERROR: BC_REGISTER_LOOPER called without request [ 283.592869] binder: 12198:12209 transaction failed 29189/-22, size 0-0 line 2896 [ 283.635469] binder: undelivered TRANSACTION_ERROR: 29189 01:18:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000a80)={&(0x7f0000000040)=@x25={0x9, @null=' \x00'}, 0x80, &(0x7f0000000540)=[{&(0x7f00000000c0)="be36434bcebade4d5889f5be61332a19b58bf7493779e7057d9b34b793595cfb96b3372cb7b9e6258e64d97eb8816fb82666bfe359db39b4a37adf6be9ca830cac9f7538ed633d25df28ada8a2d294ed40d4c52f59286b55f7eae9542bf1602f825381def556533e4e614bf6", 0x6c}, {&(0x7f0000000140)="9686f11af35ff0a6248ac2e45782a7b56da6f1ed4a759ac8957ee9d6ba4efdf75f5f8f3a5e061a79d864e5a5a7e560f1ddb87b18f6834da4d21c241c615b75eb0fe8b90e78784ab7a97fc88e15fc24542f0e4e29accac1d0b6c73a2febb1910a1f06120ccd8e9ae77673e5091432dc3f", 0x70}, {&(0x7f00000001c0)="c9d48135f359ef12cc4723c63e1c275234baf2adebe108af66342702a24580e780a533e83399fbdb0678d76dadedbc2f307c8540cbca19fc2abb26dc4fefbe35e967e16f7aab4bcf68", 0x49}, {&(0x7f0000000240)="12471f118b77d70aa614f7ed6ae5fd803017fd6adf7d10a5462f9073cd227bd66f853c0b71e42799d7a00206fcdaed600fd44d1dba8866a1c066496999c4793d4e390e118c7dd60c9734af9ebc538a28be561f1931938b42be2b8e4110cb3bec6d75498f927fe748ca301d480b28b3f196d6309e1d563f8e61afc05934a0", 0x7e}, {&(0x7f00000002c0)="14979111aac266596a5359da509f66ea", 0x10}, {&(0x7f0000000300)="c63dcbd89a00", 0x6}, {&(0x7f0000000440)="97801c7e85eba02a5d89df45377de99b62528958c5d094badb17c2708b4f63da3f313e31049da59e8c9808cadf8b4e3735b8afe9a094cd9345dd732d9b75", 0x3e}, {&(0x7f0000000480)="e0c03fb5c0a7d959c9edf63582f4a3def4f0e0", 0x13}, {&(0x7f00000004c0)="5e42456a02c33de8345ea36344475e5e813334c744593b37978f1782b0c6b9d7163ea31bba5852d0a8f315d13c704705b74b881fccd60954fae9ee82432ebc7f563f9f05e73029f8c45d0e187ac4604566f2024da73d017d202d1dd638e5ec453e4437bc312698881c74d5fae0e4bcdefd8b6ec5f661", 0x76}], 0x9, &(0x7f0000000600)=[{0xe0, 0x1ff, 0xfffffffffffffffd, "767eaae45999a9ad5f913d2a93681870060015a5a8cb9f50c89e10fd706fadf9252d72fc24c36c5dc03f36892576d9ea9ff75175c42153a3ea6049e8b8550bf2c0f5909bd470f50bbfa0221ce97fb69c22d93ddbe704a7b093aaa4bfd15aa3450b8f941cac6303d0433835ef4e03ea53a31a99a4be6fb2df546fff0fe7c61544ecdd2de175a847fd673be3080991273203682820346c087fbb56559fd818ee9208ec8efcc307b804cff6b816bc58c8aaea33bcb8c8b110cdd2579c6fff5dedfcdb806ad0002c53b3eb395d0739fa"}, {0x80, 0x116, 0x2, "e402ac301d58f677bd154eddd12914036e1af50511dd4e9b5c0d31b5f486d5749027d00545342486a4ee19bac570b055a6de0f091b2cf4647e34183f112dc2336d279de07738a5f49646129849544688f3daf05d661c8aa1408568ec9e8b66d43799acadabd3b40959d1"}, {0x30, 0x104, 0x1ff, "18567361324f57405b2ea596e7bab037b37b90605e8933a72e41def850fa95"}, {0xb8, 0x113, 0xfffffffffffffffe, "9a515fb7badbee2d47dc8360d121a70b1432ddc8c4e07b80f15bae4db831d982872ea56de7a5ae2fb3cb0c3307ab82a43e376a3ff634a5ac34707c1929717e4ecce590366dd764312173d72af23bbd55eec1c238507975bb2f4246822e0ee960b2574e7ea565977b7de10fa6d6342aa5f9fb845cf7d7300cb66030093623f9bdf683ec317659e205e6e42dfe8bfedbcf5e7eaa133401b47ac643f401eaee6974b2"}, {0x10, 0x114, 0x2}, {0x110, 0x111, 0x0, "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"}, {0x110, 0x11d, 0x2, "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"}], 0x478}, 0xc010) 01:18:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:32 executing program 2: [ 283.890350] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 283.898564] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 283.916164] binder: 12227:12228 ERROR: BC_REGISTER_LOOPER called without request [ 283.941485] binder: 12227:12228 ioctl 40046205 0 returned -22 [ 283.978505] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 283.986734] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 283.988334] binder: undelivered TRANSACTION_ERROR: 29189 01:18:33 executing program 5: 01:18:33 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) 01:18:33 executing program 2: 01:18:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x8, 0x2, 0x7fff, 0xff, 0x0}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r4, 0xffff}, 0x8) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x10, 0x0, 0xfffffffffffffee4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:18:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:33 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3, 0x80000) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000040)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 284.372838] binder: 12242:12243 ioctl 40046205 0 returned -22 [ 284.385329] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:33 executing program 2: [ 284.427994] binder: undelivered TRANSACTION_ERROR: 29189 01:18:33 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) 01:18:33 executing program 5: r0 = socket(0x40000000015, 0x805, 0x0) syz_open_dev$sndtimer(0x0, 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f00000001c0)) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000480), 0x8) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000040)) unshare(0x40000000) fchmodat(r3, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) sendto$inet(r2, &(0x7f00000004c0)="9080eb59f5035b445a53e377f945b4595efa6d77db73b768455c25772ff93eb944eb130b1d5b5db569664bcb0eb61da08d5bb8851e964f68e57549b5399541da8b091ee579e4bc8ef66a2852a6dfb9a9537e88c4e892b67349ddf54eab4d8304d1bf7e575778ee9fe63717faa0512b1a997a1d814b836e2c39f35dcec0d87f4f13d08b0a930c7f15be64d4610004143d90ac0e754bebe5625382f83a87bd11d5cbb3080601db8098b2380a605621fd40ba272c3dd628199480ed328edeb6c57f8e20b8c45a4af493ccb497bf9e98c7f6e925b29af16728c879c81684fea8102cc6a0b1fd596701928cc7eb7793414e1f89d362d79549535c63f38185d8579a6001b4a8ab9539ac30f2791ce0765a19ae71fccb3a97f590d7f46df1421f8be479893fdd8477decd9867a03f7a53698aecaf9fb8bb0723107116fde90dd79d3d0cef19f20eea130619b5cd6ac0ee35729a7846bbd903924fda32cb72d41a8f6f7570359516cfeedb680fd8be53ae0a896fd856e192fb3ecdafec76f2788a7cf7cd51af1ed4f8be5c7a68aaaf2f2a635819c08ae6898866af55a8acfe27e2d617808b5c652c3dd6bb5c3079b0898ec40a57c5fed7ec765ed36a9889d2dd9f1b011c80a503e2bc95e09a1985aad4d57e6076989f03df1d04b44e4f70290c50148d09fc7d01e177c01adb5fee6d883e6c1583013f4b355b6527e3725f61842d9a6be0e2f35de6e019f75f22475d274e733571aed982d8288b162964c5a5219ba347bfebce24de4ad54df3038928a5498e1428f92025cf9242077385c9de445c5e4b186bf2f4756309fc183bd114c1a05484a4d8dd155958d09b1666bd5c6777a333021b64a0b0dd5ed6a92d16436b19cee8ce6fddad718a875621c43550ed4decc3cd5beb62ffed58f437163841012fa71c85280a343c6a482642f0b15fe8c46c3de423de6f606d45f4a6bfd1ffa4069b7f6afe13204dbff44a053926c75bd611c9dc1643562f6564fdb9a2b084722fca369a969d274f652ac1198e76546aad55ce734623aa97ec9d1972b223d1291165511eb50bf34ccc5d236e5d5729f5455042e03709454d10dcfeda1c7cc0b8a62adb26070e31330efaad774c55d53cde14f3c491669ddc231d1ee2defb8543ba629a31e59e681546739dc6bb1a0e264e59bbdbc9ab1d7f3794d4933a70407286aa7ed5ecceca8abfb7665f0cbd57ed183ab485588088ab9305018e90839dd2c29052a5fee79e38a66d36cb161f5963f7fe47720e4d6224505720bec104b0a357d7d9736c13a66922fdca0a340046199e6cb30c9e1a181f4f7162db105a724e1e3606b62bdeb873f3bc1f267231a519347610efa09329ef3b9b5c59def77a76666081a132f8d5516d3314e93095290eef2698884ab4721f0dc2a429c33ea57ece066f8efe2dad32fd9bf2c21eb14bb30028e5dc7a1a38302388b954e70ee0b7b950a807df0ef6bcabe3479764ee5a5fd3a7465bcb0af1edc8ee94c7fdf62aabbb3e8a8c639546bbe1d76b6e530808d657486c96aee67fe0d6604efcb529a24d9363dcbd1a15e079e55e7846f39cf56d0cf28b60c949b4aaa3b71689a669e5a6614eac635edb59b136a92f655435a439760a503d7423c5e90df4603a553fc5a2f20c274192341df56757cba587a0480c02a3f04465618909731e1605dc48c1e66d22118ce9b37471f0eb87c8996cc2e9f15239221acb8f96d2c9654d3db59dbee71c4580cd4d05b37691bd208f2ee5c7632a2ddc8c94f7c3aa616a2a21729658b60cacc1937ef1dd68340494db23276aea0cea926d6e8e1a77f142b1931d56514f7f93e4f09b68f8246d8ef27baf6ab7c9832dbf4b363d5c21a89de948e861892a0a42dcf9f25956188a07233e5161d7008ab2d0af0d2c3258fa4a1e922431193ca96621a1a1334c3dfaceac53de1fe89ed54313c66062f155e33994c3b3549b97e818936ffa7dc2a5512f62df7ba6c3ba54123ecafbb77ccf558c0d61d9785f9c103b35dcdd390b5caaba1c54646613fbaee7f0ecb0b354893beb0615c713cfb78078dc132feb48c1d97d22c33336da2122a8690c725e0777f17a184b373f847a43f83809b904350308957c6d961995bd2e8f53ce2f72550b964f7f2440d13d9e3c9d9af032fe19c0746c9f2b688b35c56a184adcab9e404fca1014ef4d7145a0f1c2157126e181d69718b4e339378ac8606f34771a8aa39380c76deaf525d0174b245fb72187ab8f3592ce7f71f751b0c3928c916c126719bcb4cb61e4d02fdd6f19b0fe5c4029ce4abc69d0ddd831422286e13cdad157d5f64fb6ba3496d93947dc2322bd1d0dd59c7a9d831d132842dd44e49e61e846b13a182c580926610144e076d310b699543ac3df1569b0d0a708a7ea1c5bbd106baba67045f6b1f977d86b0206cd2998b30282dea20b3520c142e14225c8da8fffd763248ca8d99728ce860645662495b0a657ce4df070b58ecb816c5bcea2112a6442eabc32380ba1e4702187eb24daacd63cd71f6d4cd4e08e8002fb793c7137d77948e8ec4ef958d6f601fe501d8e2cd693a981b1376398d914dde100bcb34b3ce4556a81f71ea70de13d827dce013551a1579bd0bc88fa4428b0f4aee4310dfa60b44016c9ae5d5c84250b834a7b9b1e518fee894ebb3bc802861e8d77b81b10fc5087262f28b1d506767ca4d2f6c563e9ca6524eb5f5c66062859601a3eb67386c286e5a73d3284ba3ed7f8b700d0b85d567eb9e127ecb415908400420f939e5955044782ec790e2a498b50a8fb0a3a57fa4f64df50cebbec326269be7f7cec964692f6a6cd08dad6513ca28b7fe02e3942a0326b93eb3b0c5002fde2f3ea3cb4b8a8c54f0cc6ca005e4a94dafebbe480974e224633ba88d45cd13b3fae1698dd529f333c0454596b9432e7c2fd4bb5f93c7b1ec7701b004003745d57947fa6efdfe0c035b2a790111d96e536c0bce0b951eb8316b54d3661af6cf5d2d99885d0c6976d0d5bc597de18e3f2c7a5a679998b1ccb4b8e1875a661d1a9c39945ac3240dd60cfeeacfedd73ad000e4e4f33c4e089beb1f788210a7e90074866768cd0d4c08bf403aa80c6bd49e10ba974484106347e365700c4104caae95fd1bd8583bf3a4ee9be97056414edc42a105950082933dd79c40effef66235da77df259f0112ee53d1897abde0eef7f76941cf68a1963a51fe8aa4dbe74b224e93cb9f85b924bc6946dd8ccb2e060b996372eae1cca215896f7146eb41dba08a546a96255c68d001bbd0b258adb29fbd4f3b098777f5dd453fe47359b905c0c76c2d5aed985e555b5ef3ea107856998f3083bd6743cd05076c47e29fd6dec39f66025ffcb7584238fb899bd58e99a91cf7fb0d55cf033e441edea459ada922064ff7c1fc281786bc4a3650e77a5b1ee37f070d955b4f115c467c8c1dcbf746ab3598a33892e6181dd5805695e8cfb5e097eb717e46ca47d14ef48d231ba6c2e1219a4d5fd811cfd2c93b385ea1ccff564fbef0f147248880a2587998c83a1647c452056a08f5062052b9a14766c0bf6536ce1db2456361a44997e9dd3376e0abe2d07a3b911ff0ae3516d658b966c6925b9f4164fda4c2dee8021ed5c36e0a2c829d587032012a44510053fb8406d6203af80015ca42b6c51ea78f757ed44e87a50df47de097603a15bd81d86d833e78c56f10ff179b850e8a12b4bf10a824c8bdd45ef8f1d021f5d3c8e7f874802c638b245a5961a98ca5749406e1a2a24da3fe5178d27fc2370e8964756daccc1541eb0b4765c3e9f3fdbe0a4a612eb030983b7965fb8367427c86cf8dade73a4aa2b703a448574b278362b8f6619cb82cd38a20487de7bdab2d9d98627ea15ad34d3b8933d61194d678c45095ae6bbc5938eaaa7224ff2d31777b724640c3983afb2cb79e536294d01598e4ca4930774545ccaf9b2b0e4e12b1eef1a445b1d187ab3327648a9ed903561e3167eb13680cb3be33e78d6892836ec8585860149fb0ab2227addb136fd8b68540ff5a5dc9d15e0f50971128b8a6985e8955706476dbb7d96476a6042af95ec4ca8979138fc1c23454f4da23d404dbdc16ddd2b51c31983b98c61b9b076981772ab429c4250a70de2159a6c241ab488636ecb494425f8cdf07e8f0d84d0766e30cce2e636d93817f35f8efb4193552f1a82ab2c7b84f611be8e0a9b8887eaec4695f648cbac9b0a506f05ba09984131cfe8e74fb45c514ce9776178115f1ca0c31f20017c36113450d855bfd984120bf25480ff98aafd83fe83fdd64108977e4078002480a437093dff021498ab2a5a5ef8ab318e657ed213e2dd1e5562f51a66c14cffc84c2b93570773cac5ebbdc81569019a812be4c72af253eb1e12335b731e1209a2ae7850d3781b6d019903b703698662b1d2f181c1d12dc748a6ce030486698e75512be8843a007c604d92e75ab2342dfda222d6185c9e27ee6a2ecedeaeca140bf48c4359418f81cb54bba81db163830aa453578de3723f97906b9e005bc6b98d2da048ad375d98848872d2474d52bb1a1e658e08035007b4927cf65b6574b6afc80fd457ae1d289ea8e4277ac51d3e4a92e44e50f5051f52d4ef8b723d0312748f9c3764779f5d9b8248b2e719f9edc3d154c1e9c635935e1960f3af98666c03a12db5195d3b334a69d003771b5674c92bcfa743818577c611e155e9c51176b35b9e20d79bc058f9073bcea18dac61acfc1fe42795688d172d7802d26f50bc6015b98f6e4c4246bf358aea7fd82b4b8d526043c9b8af45ba02f29104a8fc8dd6052ebb7a748112a874c4be1d49e286a7f0055e5fcde3ee0c95af75fed8636aadc9de05159132274f2556b35364b0140f16a6aebd37f2c67f57bd10b812573f211f854960fef5fdc90016543457610e2649aa378f18989f471975bf7bdfdf8bb83742abdd55a58d48014f3d643991c679c84cc960b868ce9e37bf57d2bd625f8ef29fc663ea62293a065c53fa3d8747376d5c8cb6f385242e12f1787eca0030c6fbe8482177c27726b4497a755bc4e2f1f9b3ec4324f9c4ba355517996d63222164361f17493b8f0f0842b03ed114c5d205a888983813d1b815a8ffedc18f2997be3170bd7c5442112a386a56536fe8675d98b7126c22844e56b4cb6280fcacf0c55b9d43cbcc48f0e55c5189afd98af354d8419d5893d7759d8e2a806948aad2d3845d66d297a8d9c95ec4dfff73e595929008f7687c513a8280cad2656e52c287667a27d8a4f35f820ec0793e74081112a1461a8ec53ea398031ada9de6d66052322f719094f8edd901cf71af0cdd2eda0e5b077c7c94f876cf2eec2e4e9cba060ba50af03a34235adfdc0836416c04e2492caad529fabaa6a55daec1f71474d8b50ac3138c09aca0e438c6d1851b4e2b8af14b717f7609a2aaa5e0ea1173aa01cd0b9b614d986c9f5cd0dcb6acaeb406b386151d698e64ff93b4ee41e389546e3d0dff3795ae5400c89019e6af52fbec801a36f30fb35c721de803bcbf728a9512b2154e9f6ded1f5a2be6b9f4c5d7bf6d9f1fc9439359d13b46169b258de69175afdd5eb18cdfb06c2fb82dcbf4a7f2b8abf2cf60afd651cb30342fbcd3fa4e22ff553aaf3b86c56d00a2fdb1fca522cb2f32d71d5f", 0xf97, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x129a00, 0x0) dup3(0xffffffffffffffff, r0, 0xfffffffffffffffc) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, 0x0) 01:18:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f79fa68") r1 = socket$inet(0x10, 0x2, 0x0) syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x2, 0x2) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="35581e850edbc39c000d576dfe0178cd009ccccd3036eeb79f6085f889416935e80f185fefa20d486565c8fb1502b34ff3500dc34ba20a6b8deb2ffa673f8a3a64ebfc772c7ec6ef06aa2cd4e4f1"}, {&(0x7f00000000c0)="41be8d1c1c099b23e4ed92e2e329848e7bb9b7c67f7d3ef24c8a91ea28d99807104b6b48c351c0d1"}, {&(0x7f0000000100)="764a4ca69f9e0ada6801a07c5181b59b056730b3895881b9cd9e72331d2f901f64bdf5a0972fc473be372a83a6139a1cadff9da71a9b0bd67f0f442df50f223c5b2b360e822242f52c62c5c1b329d33fe3b004f2eff025c32909e33917ec8990c7dc"}, {&(0x7f0000000440)="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"}, {&(0x7f0000000180)="9c70b1c59cfaccb734dc53e79a0fa5a1c2dbb7c9f53c520359c32d7df9aa0a9199d34b85c0818e4a40aafe1db2ad276b732614e40a6cd621"}, {&(0x7f00000001c0)="d0d9c0fd021f3e9b9be25349469efa1a6b781d410b3b476c7e1a2069ce55d648c5b97822615349c279e79573234a78003db684165ef41e742b71ef273ff912a15960c6c4fdb8f186b54ffc09a1c21db2f8307a36468ecd0cf8a2b6df3d2c338d7c67a69e6bb47c0ad8f3b8c5ae31df5acf94db2673ee541c6729f9874c739d8c7a0c558f69a4e8bb0a0e9507f2917329f303ca4a79018a11a7cbdaa1ffce89e95291532e445e95ef5b4987ab71ecbcd2e7e54e5e158716a50692d4e7763033c104650cdbf62d"}], 0x0, 0x0, 0xbd}, 0x3fffc) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) 01:18:33 executing program 2: 01:18:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x24080, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000040)=""/89) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 284.788449] IPVS: ftp: loaded support on port[0] = 21 [ 284.842497] binder: undelivered TRANSACTION_ERROR: 29189 01:18:33 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) 01:18:34 executing program 2: 01:18:34 executing program 1: eventfd2(0x1ff, 0x80000) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 285.155824] binder: undelivered TRANSACTION_ERROR: 29189 [ 285.156199] validate_nla: 1 callbacks suppressed [ 285.156216] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 285.181171] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:34 executing program 5: 01:18:34 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) 01:18:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x10000, 0x0) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000040)=0x8001) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:18:34 executing program 2: [ 285.300942] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 285.308995] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:34 executing program 5: [ 285.447238] binder: undelivered TRANSACTION_ERROR: 29189 01:18:34 executing program 2: 01:18:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:34 executing program 5: 01:18:34 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) 01:18:34 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/udmabuf\x00', 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1, &(0x7f0000000180)="0adc1f123c123f3188b0709faf61d97f427c8fd551e8effbfe8bad24778e1a33743dc655f04db74fa71282c7de1d8b88b0507745a25bfa7f3f3fbc683e476acbbfc5f63f679527a15e442be3dcc1cbcc2e5fa28e96d2201ab27f3ba1daf9ff37") r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x40140, 0x0) ioctl$VIDIOC_G_EDID(r3, 0xc0285628, &(0x7f0000000240)={0x0, 0x873, 0x400, [], &(0x7f0000000200)=0xffff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200400, 0x0) ioctl$sock_proto_private(r4, 0x89e5, &(0x7f0000000040)="2b55e4cda3a9873f34e9fe5207f240da4129dc1c030bf6f4885cf29d5e074ce1a58fe8b166b5e848801678f81174ff2ca50e225d5463535e66875202440819ac44d86704761793d09bb5af7dd39ba5208f3fa9c59a14282c281bfa2dffb6cc64bda4d7ca4d83261b2f9dd3a54c8a30d3facfaf17c3cd8a5f21881ec8b7d8ee84771fcc7c3f234d85a99f1d0c203f9f3803e2572975fb3d3f8b4f2385a69615412f461a53184537de518130c01075f71174fd97") [ 285.795639] binder: undelivered TRANSACTION_ERROR: 29189 [ 285.888101] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 285.897695] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:35 executing program 2: 01:18:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 285.997721] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 286.006096] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:35 executing program 5: 01:18:35 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) 01:18:35 executing program 2: [ 286.196650] binder_thread_write: 11 callbacks suppressed [ 286.196671] binder: 12332:12335 ERROR: BC_REGISTER_LOOPER called without request [ 286.234741] binder_transaction: 12 callbacks suppressed 01:18:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 286.234774] binder: 12332:12337 transaction failed 29189/-22, size 0-0 line 2896 01:18:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000100)={@mcast2, 0x0}, &(0x7f0000000140)=0x14) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@remote, @in6=@empty, 0x4e20, 0x6, 0x4e20, 0x1, 0xa, 0x20, 0x80, 0xff, r1, r2}, {0x7, 0x2, 0x1, 0xb0, 0x100000001, 0x7ff, 0xfff, 0xffffffff00000000}, {0x3, 0xfffffffffffffff8, 0x6, 0x6}, 0xbda5, 0x6e6bb6, 0x0, 0x0, 0x1, 0x3}, {{@in=@loopback, 0x4d2, 0xff}, 0x2, @in=@empty, 0x3503, 0x3, 0x0, 0x5, 0x3f, 0x4, 0xff}}, 0xe8) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:35 executing program 5: [ 286.324669] binder: 12332:12342 ERROR: BC_REGISTER_LOOPER called without request [ 286.332662] binder: 12332:12342 transaction failed 29189/-22, size 0-0 line 2896 [ 286.388616] binder: undelivered TRANSACTION_ERROR: 29189 01:18:35 executing program 2: 01:18:35 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) [ 286.512969] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 286.521550] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:35 executing program 5: 01:18:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 286.665053] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 01:18:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x80, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000300)={[], 0x2, 0x3, 0x1, 0x0, 0xffffffffffffffff, 0x3000, 0x113000, [], 0x7}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:18:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x4, 0x450, [0x20000440, 0x0, 0x0, 0x20000518, 0x20000748], 0x0, &(0x7f0000000000), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x7, 0x10, 0x8, 'bond0\x00', 'vxcan1\x00', 'bond_slave_0\x00', 'batadv0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x2, [{{{0x11, 0x12, 0x5, 'team_slave_1\x00', 'irlan0\x00', 'ip_vti0\x00', 'syzkaller0\x00', @broadcast, [0xff, 0xff, 0x0, 0xff, 0xff, 0x6d4f153f0b499718], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], 0xf0, 0xf0, 0x128, [@helper={'helper\x00', 0x28, {{0x0, 'sane-20000\x00'}}}, @m802_3={'802_3\x00', 0x8, {{0x80, 0x10001, 0x7, 0x2}}}]}}, @snat={'snat\x00', 0x10, {{@random="0de2f5369425", 0x10}}}}, {{{0x9, 0x2, 0x6005, 'ip6_vti0\x00', 'tunl0\x00', 'veth0\x00', 'tunl0\x00', @broadcast, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x70, 0xa8, 0xd8}, [@snat={'snat\x00', 0x10, {{@remote, 0xffffffffffffffff}}}]}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffe}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc, 0x1, [{{{0x11, 0x0, 0x806, 'bond_slave_1\x00', 'veth0\x00', 'gretap0\x00', 'nr0\x00', @local, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], @empty, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], 0x70, 0xe0, 0x118}, [@snat={'snat\x00', 0x10, {{@broadcast, 0xfffffffffffffffd}}}, @snat={'snat\x00', 0x10, {{@dev={[], 0x28}, 0xfffffffffffffffc}}}]}, @arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xfffffffffffffffd}}}}]}]}, 0x4c8) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 286.818151] binder: 12361:12363 ERROR: BC_REGISTER_LOOPER called without request 01:18:35 executing program 5: 01:18:35 executing program 2: [ 286.861110] binder: 12361:12363 transaction failed 29189/-22, size 0-0 line 2896 01:18:36 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) [ 286.954954] binder: 12361:12370 ERROR: BC_REGISTER_LOOPER called without request [ 286.962871] binder: 12361:12370 transaction failed 29189/-22, size 0-0 line 2896 [ 287.066772] kernel msg: ebtables bug: please report to author: bad policy [ 287.128390] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 01:18:36 executing program 5: 01:18:36 executing program 2: [ 287.208143] kernel msg: ebtables bug: please report to author: bad policy 01:18:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 287.336420] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 01:18:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e21, 0x8, @rand_addr="a0a86c92d0cd241352328e4aa27a46c8", 0x5}, {0xa, 0x4e21, 0xf37, @dev={0xfe, 0x80, [], 0x20}, 0x200}, 0x400, [0x0, 0x401, 0x4, 0x8, 0x0, 0x7f, 0x7, 0x8]}, 0x5c) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:18:36 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) 01:18:36 executing program 5: [ 287.435467] binder: 12388:12389 ERROR: BC_REGISTER_LOOPER called without request [ 287.533160] binder: 12388:12389 ERROR: BC_REGISTER_LOOPER called without request [ 287.543881] binder: 12388:12389 transaction failed 29189/-22, size 0-0 line 2896 01:18:36 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) sendto$inet(r0, &(0x7f00000000c0)="62967d83650ad5b7c8b1b62376155bdbd48f7fcb8d66386e1535b587c90f7d55c0b582caeedf681a4e04f00f3fec458b2b731fa34b6fbb033b3de93a87ac9a87c0fccbbe2428be9abfb09eaf64188dd83c77f222044190b276c52bb831722f5b995c81f361efff37edd2e67ff738192b5d120d5352b040fb675ff10a5ada72bdb390889d2a399be0", 0x88, 0x80, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = socket$inet(0x10, 0x100002, 0x40000000020) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:36 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0F\x0e\x99\x1b\xa6\xb3\x89b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc>\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xe8=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x9f\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\x00_\xa8\xd8$s\xc7\xfb\xf3\xec\x10\x81\xec\x01\xa9:{;\xa1\x10\xbe}\x87\xfbf\x8ee\x99\xb2\xfc\x91\x12T\xce*\xe2\xe7\x7fjC\xf7\x01\x9c\xf0\rm\xf2\x9f\xfez\xc7\x1ar\x82\xba\x8bEh\xa0@\x155\xcb\\\x1a\x16D\x18\x8e\x1a\xc7\"\xa1\xb1\xaa<\xbfx\x06\x139\x1e\x8e\xbc\xdfp\x101\xf2\xf6k\xa1\xef\'\xec\xc2)\xa5\x86\xbdlr\x94MG\xfb\x8d\x94\x7f\x84\xd3G\xb1\x1f\x05\xd6\xe3\xb6\x0e\x04\x99|\xe4\x91s\nT\x99\xd5\xad\xae+\xee\x03\x19\x96\xe9[n\xbe\xa2\xe9\n4\xd9K\xea![\x96a\x86\r\x9f\xa4y\xda\x8f\x83\xcae\xf1\xa6I\xfc\xb8\xcf\xc8\xd9\xe0.9\n\xde\v;\xc7=VX\x9eQ\xd4\x7fd$_\x81*\x13\xf8\xb7\xeb\xc9;\xed\v\x9d\x84\x1c\xc8\xfcX\xb7*.\xdf\xba\xd9\x1e\xa8CK\x1c\xafc/\xbb\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00', 0x0, 0x0) close(r0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) [ 287.658614] binder_release_work: 1 callbacks suppressed [ 287.658631] binder: undelivered TRANSACTION_ERROR: 29189 01:18:36 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:36 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) 01:18:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r2, 0x0, 0x10, &(0x7f0000000040)='@wlan0ppp0nodev\x00'}, 0x30) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r1, &(0x7f0000000180)={r2, r2, 0x5}) ioctl$TIOCGETD(r2, 0x5424, &(0x7f00000000c0)) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000340)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r1, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=@bridge_newneigh={0x4c, 0x1c, 0xa00, 0x70bd2a, 0x25dfdbfc, {0x1c, 0x0, 0x0, r2, 0x20, 0x4}, [@NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x2}, @NDA_IFINDEX={0x8, 0x8, r3}, @NDA_CACHEINFO={0x14, 0x3, {0x80000000, 0x6, 0x3}}, @NDA_LLADDR={0xc, 0x2, @local}]}, 0x4c}}, 0x4) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 01:18:37 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21e7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 287.975302] binder: 12411:12415 ERROR: BC_REGISTER_LOOPER called without request [ 288.006341] binder: 12411:12415 ERROR: BC_REGISTER_LOOPER called without request [ 288.014460] binder: 12411:12415 transaction failed 29189/-22, size 0-0 line 2896 [ 288.099159] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 288.129230] binder: undelivered TRANSACTION_ERROR: 29189 01:18:37 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2000000088) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0x9, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x10) recvmmsg(r0, &(0x7f0000000180), 0x400000000000370, 0x6, &(0x7f0000000100)={0x77359400}) [ 288.157522] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 01:18:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 288.415082] binder: 12437:12440 ERROR: BC_REGISTER_LOOPER called without request 01:18:37 executing program 0: r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000300), 0x800) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000340)=0x80, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) read(r2, &(0x7f0000000380)=""/231, 0xe7) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x20000, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, &(0x7f0000000280)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1faf}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e21, 0x6, @local, 0xb8}}}, &(0x7f00000000c0)=0x84) 01:18:37 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) [ 288.460313] binder: 12437:12440 ERROR: BC_REGISTER_LOOPER called without request [ 288.468377] binder: 12437:12440 transaction failed 29189/-22, size 0-0 line 2896 [ 288.502766] __nla_parse: 6 callbacks suppressed [ 288.502787] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 288.569580] binder: undelivered TRANSACTION_ERROR: 29189 01:18:37 executing program 2: 01:18:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:37 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2000000088) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0x9, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x10) recvmmsg(r0, &(0x7f0000000180), 0x400000000000370, 0x6, &(0x7f0000000100)={0x77359400}) 01:18:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x400000) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f00000000c0)={0xf5, "9c9759570bdc658a10b6498c6326134a9d6a16c06e41dc9c78856f45dceb6308ba57bbf229d33c083b37c8259990a9019ff1368984be60f4f816f27bf2bf9cf06803b9ae801150d0f0a642a24743d9443a90f58054277e1fda10d20d57270d10d5863bac4dacbe14b9e840f024bdda076dfe4c29288bcafa4c629a310a47b055f33d00d430acc357ddfc530c766703883e529cb9ecdd63fb2d0a6b6630edd803129c01492df03fc965f4b84a5dd9897909f92cf0f6db1c1b016b7388ea8d5f93846e16dff4548c56bd463399241855701a86d78816dbbd1bd0b1fa58c46e4768c01b0797dead1e5adb7ca48ce4d1d1f91cd322fb3b"}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f00000001c0)) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = socket$inet(0x10, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r3 = msgget$private(0x0, 0x420) msgctl$MSG_INFO(r3, 0xc, &(0x7f0000000440)=""/187) 01:18:37 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) 01:18:37 executing program 2: [ 288.872683] binder: 12456:12462 ioctl c0306201 0 returned -14 [ 288.911962] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 288.956063] binder: 12456:12470 transaction failed 29189/-22, size 0-0 line 2896 01:18:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 01:18:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x3ff, 0x600) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000000c0)={0x8, 0x264, &(0x7f00000001c0)="4e4b1bb07d251f2b29765572d653c697ad0241341539c3a2b3df694451424dcd5d6f3c3337007618b19229356ead239e0ba2307883a8215d8c40862ff5f66781e680aaf44fa386da19bd7881ad62b4397dec6e3796fc3118f5df4839ba4086316e37882d9ceb6bd64c0d8e15ceb9d355b99095d54f97e85afd61085b4f51f5cc5be0184194c1afe4fe61606c51468df8cbb5f60c879e805786f843ee440c32f6e48c04c0dc30c7082c4c98d3aaadf2996fc77a4a7b1c15af7fe10d55bfde01c11bfe55bb224e45e43c7342a42e80a812a8f7d0692b287fc8578b", &(0x7f0000000300)="1bf06bf432ab165d078bc27d0bcb49d50d00f4698687cf513c9090233425bbd91a5466fd093dfc3446a1d7f3fe4eb2d2dc84c2c8c432f7d194954768d45ea2e0f214ee36e3623fb67e4084ae8860a5a375ba136ff62d0a4e922e5185778fd256171edf59b20165666fb59ab4271e2df287ee5b011eabfb00674f3cfd17a50ad6723d14200763edbc52f7bfe4aeb15f4b16da336f362b1e96d23621df809b8156a0a38f7110a56fa2a40df3d988d2270ef1374e079b41830c881b", 0xda, 0xba}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f00000003c0)=0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)={[{0x7, 0x100000000, 0x248, 0x100000001, 0xbb5b, 0x101, 0xa, 0x10001, 0x1, 0x9, 0x2, 0x8, 0xfffffffffffffff8}, {0x7, 0x33, 0x7fffffff, 0xb33, 0x3, 0x9, 0x4, 0x81, 0x391b, 0x7, 0x8, 0x2}, {0x9, 0x93, 0x80, 0x1, 0x100, 0x9, 0x6, 0x8, 0x3, 0x81, 0x2, 0x3, 0x410}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 289.015966] binder: undelivered TRANSACTION_ERROR: 29189 [ 289.048815] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:38 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) 01:18:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:38 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2000000088) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x7, 0x4) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0x9, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) recvmmsg(r0, &(0x7f0000000180), 0x400000000000370, 0x6, &(0x7f0000000100)={0x77359400}) 01:18:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) getitimer(0x1, &(0x7f0000000000)) mq_timedreceive(r1, &(0x7f00000000c0)=""/233, 0xe9, 0x0, 0x0) [ 289.315093] binder: 12482:12483 ioctl c0306201 0 returned -14 [ 289.364229] binder: 12482:12487 transaction failed 29189/-22, size 0-0 line 2896 01:18:38 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000001fc0)='./file0\x00', 0x40, 0x0) sendto(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0, 0x0) close(r0) select(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0xffffffffffffffb0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x0, 0x0, @rand_addr="342909f01cf790bad44e77fd1bb07c18"}, {0xa, 0x0, 0x0, @local}}, 0x5c) [ 289.412568] binder: undelivered TRANSACTION_ERROR: 29189 [ 289.439728] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:38 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) [ 289.507825] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 289.616893] binder: 12502:12503 ioctl c0306201 0 returned -14 01:18:38 executing program 5: r0 = socket(0x40000000002, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='bridge0\x00', 0x10) sendmsg$unix(r0, &(0x7f0000000840)={&(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}, 0x8804) sendto$unix(r0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) 01:18:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = fcntl$dupfd(r0, 0x1000020409, r0) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f00000000c0)) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000300)=0x7ff, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000100)=0x1f) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0xd0, "dee51d654ea51055cd46e0c867aac235aceeef4122755a0385e7122cb87cf5763b8fffab06fd92e8d2891e1269cbd788e36be9d1d0e0e533693aec7de81d1424326b5d79749c1f4e064f5ba97115e4c19b04aa8f34e60d6aed5c9c986259fbd20ecb95eb807175dfc8d33140809af9ea8de133961da8747afdb6dfdd6369c981218c12d46ea822504919c320c6f63ab0a68053110554cbde30353caf3a01c9abe5d197f6fbfdc916bd807647694d8c12c3ff200a8ed93deda4b6389821c011af653d162757ff3d61e2ef13fe2597f768"}, &(0x7f0000000240)=0xd8) ppoll(&(0x7f00000004c0), 0x2000012d, &(0x7f00000004c0)={0x77359400}, &(0x7f0000000580)={0x3}, 0x2) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000480)) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x208, 0x3, 0x6, r2}, &(0x7f00000002c0)=0x10) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000000)={0x5, 0x7, "fe8ae46d79b6d217d9016402bc1c50a32be3810ddb0e24b02f2fca08444b3fec", 0x7fffffff, 0x8000, 0x8001, 0x1, 0x1c4}) r3 = socket$inet(0x10, 0x1000000000000001, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000440)) sendmsg(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 289.680298] binder: 12502:12503 transaction failed 29189/-22, size 0-0 line 2896 [ 289.699150] binder: undelivered TRANSACTION_ERROR: 29189 01:18:38 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) 01:18:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 289.800067] raw_sendmsg: syz-executor.5 forgot to set AF_INET. Fix it! 01:18:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:18:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x0, 0x0) readahead(r1, 0x3, 0x3) sendmsg(r1, &(0x7f0000000400)={0x0, 0xffffffffffffff09, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth1_to_bond\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="07000000fbffffff03000000e04f39b59de00000"]}) 01:18:39 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c56", 0x10}], 0x1) close(r2) socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x661febad, 0x2) [ 289.999573] binder: 12521 RLIMIT_NICE not set 01:18:39 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) 01:18:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x3, 0x7, 0x5, 0xfffffffffffffc00}, 0x8) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 290.319368] validate_nla: 6 callbacks suppressed [ 290.319390] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 290.334882] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:39 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = geteuid() fstat(0xffffffffffffffff, 0x0) keyctl$chown(0x4, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='io\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) write$nbd(r1, 0x0, 0x0) fchmodat(r1, &(0x7f0000000240)='./file0\x00', 0x0) 01:18:39 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) 01:18:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x8) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f00000000c0)={0x401, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) r4 = dup(r0) getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:18:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000000)={0x0, @rand_addr=0x3ff, 0x4e24, 0x2, 'ovf\x00', 0x21, 0x5, 0x17}, 0x2c) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0xd6}, 0x0) fchdir(r0) fchdir(r1) 01:18:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}]}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x40001, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f00000000c0)) 01:18:39 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) [ 290.772248] binder: undelivered TRANSACTION_ERROR: 29189 01:18:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:39 executing program 2: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) nanosleep(&(0x7f0000000140)={0x0, r0+10000000}, 0x0) 01:18:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 291.081339] binder: 12583 RLIMIT_NICE not set 01:18:40 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c56", 0x10}], 0x1) close(r2) socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x661febad, 0x2) 01:18:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x100) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:40 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b0") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) 01:18:40 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) [ 291.248470] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 291.256854] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f00000000c0)=""/109) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000000)={0xd000, 0x1a000}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000240)) 01:18:40 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b0") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) 01:18:40 executing program 2: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x103d, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f0000000200)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e003e0f1110c4220daa52498fe978e29fd69000006f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) r1 = dup2(r0, r0) execve(&(0x7f0000000440)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) [ 291.602912] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 291.610748] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:40 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b0") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) [ 291.824996] binder: undelivered TRANSACTION_ERROR: 29189 01:18:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:18:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0x50, &(0x7f00000000c0)}, 0x10) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), 0x250}, 0x0) [ 291.979265] binder_thread_write: 10 callbacks suppressed [ 291.979290] binder: 12637:12639 ERROR: BC_REGISTER_LOOPER called without request [ 292.064203] binder: 12639 RLIMIT_NICE not set 01:18:41 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c56", 0x10}], 0x1) close(r2) socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x661febad, 0x2) 01:18:41 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(0xffffffffffffffff, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) 01:18:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x4, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) socket$packet(0x11, 0x0, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r2, 0x0, 0x9de41ba7b343173c) pipe(0x0) writev(0xffffffffffffffff, 0x0, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000040)="17", 0x1, 0x4, 0x0, 0x0) poll(&(0x7f0000000000)=[{r2}], 0x1, 0x200) close(r2) 01:18:41 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x10002, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @rand_addr, @remote}, &(0x7f00000000c0)=0xc) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={r1, @broadcast, @loopback}, 0xfffffffffffffe4c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) sendmmsg(r0, &(0x7f0000004a40)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)="7dc835e0c8b1b639fb2e65f3e9cf95364b10c1f7a15018de5b39409bf161ebfd627c58e14fce5ed0f2782b818d9fd3522cc973787183e1145d84ac0e94b344e895edbe517f63652dbd0f1a6b10db84a4892ef64321a09e6abaa3b45537e9337a899b16ad2da5e374b2b784afda1c8a69475aa1b9fbecca9f63976117ed9d80e2eb4bc2531daf0cef7c87d9e443a4f70f0fa7854897b704070b95931505453cee146182fd3776b0b9f387adaab29ac6dcea8834169ffe7705d229b15b77ba88", 0xbf}, {&(0x7f0000000200)="2e18649b83dc067420a9d2996a36831021085f", 0x13}, {&(0x7f0000000240)="4728a8ea17ecb8b001174217dfbb241f734915f477136b400eb4d35e4a1122bff46c27adef4368b9007efc18233238153702999924f5f8146d169434f60c36fbb1dda2de4d85521ec95aa12c093fff8b0069e417f1e8556aeb6003ef10bfdb1da8a74eb6d85b00eb6f5a74fb93d67cc2d1d748ee8ceae2800ab3b74ffd2a8555a50c43b167246683b61b92", 0x8b}, {&(0x7f0000000440)="fc994a73a502420fb4b86a8fa525aa05c6912901e6cae7596649e153b3d3902c8d36508f7cdcd0ca8696ba33ab55c66e26e6bea741ee4e7b9598b09ac0c716e89a4b5281db805603eac9574d245df175e0a65b2a98478033cd58b24ad6a8081a02f93169babde02234fa6694683e6749571e4ec03051bae3daa7145f29656269b8a54f628dd2cdcd97363d27779d7608cc66782842e4d33fd252ee2119f0c97e50404dde642040", 0xa7}, {&(0x7f0000000500)="67caa9e3fe1e68c28eeed65c915326d45d063d4166a36c63b4a4bccc3785843d71de8abfa9ee4d562172c1a8b268a5412389050ad951353ca75e8c5a7ee06561cd386cf11ba436726da30e8da651a9604840938001b46381840bff2c81fd5bb1937813", 0x63}, {&(0x7f0000000580)="8658d38a0e97632e0c1734c271f4f408d6b80a5482736abbab931254cb25577141eabafd9e118f14b21c8378842ab82b9ce3f6d91251cad31f1fc7a6dde168b55354ee07d7136a8a7d73656e", 0x4c}], 0x6, &(0x7f0000000680)=[{0xe8, 0x18b, 0x10001, "95d2ba65909381a75a60051f4629e886ee7438d4a527a474f5b2f3e94f9aa7c01c6671c33ae37893170abbab97bf25ae1326c1bfee25d3f47e991bbdda2337b9ef4084226aff39dbdbc91cb97795e30e7f81fb6f37ae97a8f6fc89aae47f0e9c8b622eb38b5d8ed3b8f0368655b3f5697bcd0ec19f366738bb1ea8b4f5f6e7501cfc1129a8cf0c7c9de69966e0ca518f2453ba6d74073c33839f661776dc748a8c37af155e27ea4db2d31b240b34a41c7380d886c2b7a20080b998f87738b282b4cf267e5f580a5bcf6ba61bed86505ffb"}], 0xe8}, 0x8}, {{&(0x7f0000000780)=@xdp={0x2c, 0x5, r1, 0xc}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000800)="1189654e9dc794091a221f43e8030a93a557c866139444aac2cbcb547e67652695fd22090af50d6f5172e1f6c053f17eaef4145af67be616f2ef8b4ba3840f61bea8b7b2c4451664ce9602d413f8bc1c1624f4cc1cea866c53284bf1cd08b0cc40d4f13ab58c24bc19fe0fc4834ee0d34b57d69f4a306700528cd0a39e090de4700543077e16192f5ba04f2673adcc506b71483486e9e21a3a788e7097d50fe7b1cf6c3c5e070cf04c0e7b4a01318aad4fae8c16485b4a63ce86a973c41db41ddb2df99a63b91af322d336118c0295f44e0bc0d6faf8", 0xd6}], 0x1, &(0x7f0000000900)=[{0x1010, 0x108, 0x1, "ea0bcdddecb2883b35cd74545a786c033146a1b5d090927ca5d3ddfd63bcc936b8bf064eef660c77d1e1ea4e4e8c585e0fbd2227d62c6d482f3677ab74ff88ad2d81706717b8157d775e66d3338a7d063e0dc308931fff6624fe7a39d81c37da91f751cf8e38e0c50faa124961f1ca73fb0ba0cb1d2acf5814753981f20d1eeb0e882afcc5f8d05ec55fa4210d8261138e57cb480dcc167a042f0aac3666c1bf8fab4571d4dcf5047fbaf238b1cd01d7770742618eac47665cfabe32d27b6492330822abbdd799d4934b4aba0dc8d7f2538ea65d41e8cb152b35c29714982cd0a9fc4df7f3f359ca0f5357432c50a93d5bad26c048eeac1209bd6640f7ff6f1b198176305fbb1b7312daf0b269ce5e88e413b49de968506fd59bad3ea6ea9cbfbd9fbba8f2031432e3bc4aba72ed4900e5ce1d2d383d18e093f6ed1ff26b00d9379580d9c9d7ac26e027aeb05df7b457d3abe1c97273878024924cec249285513a51cec6f4bf1a72fbe2ceb6015a71765bd3e78a5a08af101ce5e56c20737b2fc298d335d4374cef9cfc7943159764e752211c6ea787c49bb244c70947a280831c994cd9b85f3ef870c482fb2be55bd51a86272b88c7cc814f223f029a6f76b8893b4d58c65d434a3a6ff27a4ee99f585e50f2a91810ffe4c56154fb864d9cc82c091bca195be6dbd9ae83a26b5ff00370f32cb5f746802a6ead5d65289d55ec44d9c340f0a38ffc387d6a33906371b850a06b584b9a33a9e3a9af009a1a9dcbc4431bc08d3577ccbad7cc37ecf59929d606fa050bc08abea5a7dafed84d1b429b498838215a104ff11ff982134177c0af318e03391f40d2219ca82cf2eaca9e63a189cd7cfbaebd4d98e7a7659096b798db069f57873bbf45d9e03172ca912a356221d6f0677f81f2063334f878d28aede4c0a96141807b2613a7ee439d459269c3893426bc053cfa1818fa94c5a8be90dfa1e0f8b7c563f7ebfd5b1863bfeccd6b56b564688ddc2b626ca0f465e272c42a066a8295b657c073f1e5886dd5ade1894db7a2e96fc5446983617de7602b1ff852289730d5eb0ae45aba092d1f80afb5650192ed4a00e560e60e332a74cdf4863b52ec380aebf6f7af3daef5f5a5c0734b282fe56ec7f52e63bcc8710df1596ba05da8594ba2017d6ee1d019c6422524fdeef9658b9912fdeb074e818a77f0c109d026ce6d1a0c5860f182835d91422662edbf549252ac114f12fb5172afb2173e7236cd6b8458fbd78d91015054565383f8a26bb91e7c8f93521fbccb77f8538f5a1309481277df25269ff85109206dbe8a800e6860a2d4c405e5f7f5193e4b8cfca7ae3d29cf47053c8d1a17e20f5fa6959f1229c045c5a1ffb589d91bbfb4f6b1bd1379aac111ce8c146f94a50b9760dba2cf84525339b7067ded5527cffef8f43f668521090b73cb03fd6b7cc46cd10b87d52946af8cdf869f64033a06d6e1eec95e6e9a232463817ea9e3fe0841df01af3082445be972fe274d4e54f5b21c64392fca34294a29e909653a3afb7536bab98f342551841fda41c01c373651d9f4347a90f9476f6214a4a46ece51b402fa73b6caa697778cf154f43bad31ad7fae88f2fe76fb5c11e92c981c37f2ced8cca8ad99255b2533c3832a2a275a51598fb92d2a5fc6578d6b9f3bff66c0808bb1b5245839327062396717b9013aaf70f7a9c1e089fd4b01b6efaf9659bac71909f8566b8bc2b6ee6acd23d1afbe16fefd1cdbd26e9925f714c947b30e7de18be6193d946cb1f546c705e7fa8189cb41c11d224aaa66fb27fba4c37fbfeb59321fb145a2803a21060791acbcfb5b654dc9c24d382032ade7f8e95f50d0a55d8c4556573a9afd8fc557e6611ca7290fab6297658742b84ccefa6cfdfb2fde436abe4da9f40e9eacaba6d16a9059324e9dcdea8f7a3e09ac3f28076040cbec9c526be17f7a755a2e7e963e197162548c06ef327ea1c09d47b53be64a99fb217cd6ae93f6baf4a45f19da5a398a76a2922b8125f3509aa3ca0703dc4a6d504b573f52f544c63c5cb15edbed29b2ef28ca50b27f223f65929261e5bcc4a8fb279d9d2f4c3b138d9b4c5dfc08615e4871f93a4fd663dbc4869944806c1d772703410fa169d6fa4ffe2d7717d095beab610d3b9ff0614f0c4bd61ce6c057f11bef4756c2d08583ed7f2a010df399dcbd0a7855dacdef6e72c7405e9321a88fcc5b01fbeddcec0e7de5d3ac9d81c27a10859c0f4959d001fcaccb1bdac77b06273f89ea4d311bb7db7b6f524ce8c124ca2dd637aa25d3cafd1a1177afa33ce654c6035925a214d52acbe932df8d0a9b47a2cd8a1bca50199d99bdaffc40211779a3338eb51fb5c2fdaa1045dd88349f8fae3ee10fde5d2ae43ecd492340947485ebd94de5115919a11fc2a548c4f981a4a1244c73cd853e0eabbfc602805bf703a32ac4c46849c9d6dd1f84b6d9f872d9a8a64b25224ab10feaad358a952499511649c6e2fd6f8937eab95dc7ab9644d1785cd1c9ce9335c0a68b991652cffc7e2cedbef1c3499b827dae1084fd79582cca5f3fff83b10f803881e0f0bc89f3968523814d30397a3128b6ab2bb6f3584de25aff18c8ae5ba7a3dde875e435d0f8f110822887ee3cb2f2f29220c1c1fc90f3804b07707bc61dd7a36af70f6780102360f5e9efc853051f2019085c603841ba14cd1c72db3407d7b3e11b3edddb41a52e13e17205ea172c5e15965d5cc841884f95251ba7f77b4a790bb1da84637dd219fc2fb8d26cc891ea731a8dd0eea6d389a638748b98224e5eebaca905c56d40f4902ef347fa983c2a55041bf1be4c8faa19f7420a0a661d925a6a0172f394567f55de1bdd3f556f048890c41f9b3be442cbebd64d092c01f1bd3a1118e69029b8afc60d95cf91720467863f04bf25487c9f3d1302ae2d15df93cc49a57580c9678f8b3b973fabcc957de9521bd26490bf7258b10bfe01cb6c3617492d1a5b8ff2fb68eec2fd59d51af4b80ba3e032052caf7289d7fa88890ed85378b2dcecd849421b8df3684547d8b05d90eb258b88793ac3d85e3a1b467eb33bb1eb2c9343b501a90880581adb835162ddb9ed61ddb4786db2740296e24838dd11648407ca739dc740d38273ea9cc5f373ff4e915309c4220283d086da099a17577325b5aa2daf494c49b6630b803e78b7444c683bcb105b7e0ce49356ec269526336b627f1e6039ac0508b477636fe39ea001a2d2378e333c46c17e23b927c82438a586153127dc45efef29efa63a813492bd88b4762c7c4b4ca37b513806e7e23707624f0d400886dcd98b4d99956dc5bb7e1d27148db2d6eda729590220130deb6de8ae56a16fc73a42e9bb2934e1ae8eff93b760bbcafc2383a4e56e31468807210d1fc31d73bc245978379992d5ccd0dea74b1749c5cc9d73a1c628c86de78482aaae09c76bfd539063d1f1aa692e0a390fed42cdc9586428fbf7c3f93698aeb1de715fdcff5bee26f4897569fa9e0ef47788157b0d4206f15a165593d45bf40f72f149f2b4eb5689f0a6f312f6778fb5dfc97749212481518d17ec9c7c569385f2964ead8361692411f26c8284f2ef74f4b215437be0a380522d82154967021dd3bccf674706a80e526996d4b49913de7910bb699b68dd113d88da53e386f900fd7c45a41fc345e4e0a5a73d22d9a183970d690583139043f71ea70496dfb94fd59d7df3a8901543162de292e432a927512b7a4278bdd16644db796345fa951e294b6627c960cbb5f5a84cf4714b482c6a89bf0031766a526f57ca66db7b4151a70fdba2845d0b49403744111b89b9e8136921617877fc545bd00808f4974865c901e9abbc8c56befe16ec7c04d978e0b60b21d265d75677b00261c8e1ac7bfaccc1ca310900ab4c3832c7b324c0817f97ec2b0ccb132671cf6e592ec3e2a422f994ca2152a27c9b2d11684f7a3643f462a60fbb5ff7630006592b4993e876f73e684fdc844f63176beff2768949b69371dd80f169cbd62ee95b03ae2b28bec888a6bf04b6e51e411cbec6530b27d3623bc98da1232ca8d93bcccc3c6356450303b56da3b2881b45bb5b8d8aa237e15b210d2cb12fee519466cf55abb71cd8303c8253568767acfa56eb15fa98d8b71dd39f78e272150447072eae34d7a853ab7c78cac8870e50f69f09ed372b97fa5f78bc9c8e78720435a34257571f06f6a297690b9129b2bae5108404eab68297dc1d29bcb3a7df0ffaa36c4833050cfa86007929958e8931ceae4a953795b28b2346e30b90fda7744d1261fb349ba8432b2ea1b397091ea38943c018c35dce1bb30f3c62947ab6cb7893f10b9ee728e72265c2820f174e1e57897cc225e8a2dcee7f54e35c1f8b40bd2dc083c7d17e582984bad035ddc055c6d4dc6df926bade9d9200efe1293737ac58095a42a99eadc5f8897610028c50b9cba74e502e52ca3ab518f9e98355086e723d70d7f1a554b518f17473b7d8fda4fdfda30a44cbfb5140f8ecefbf6579ea82313ff88192d8b59a194497a6b8f9e4edae6bd10e782ceab8e67d4ddb18524814460d8317e4e7cffcf6af441e8eb51a6385d53c89c82e47ce11ab834efb19fec089e84ae54ca1c02884518514739505a3f061b97e4d38650fc07a5a0bf9dca02579b070b2d703333221868fed09f1b484567317be549156954f032b0e0573ff5a4cc90c5aa633e5b4f8e71e20d075ca8f806e0f7760099e2d8795e8e66dc5ce59eb45a3d2639ca9af4985ec5dcbd779f0f474a78852feef15b0c69b48033224352e0b31dccbddd7325c214284a6d364bec058d579ed920f6c0845d607658d5612f7f0e239a54909a205f57d38e66c735d65b3fa20a838c59298e2de3f8d06e60000abce32029484f800fca2d5dea696a949844a2055f4137f27ba68c34e9134b1b9eacf27547c30a0258930d5f75d0da3a2d1b0bbf94009dc28a7de336f221beab8308c5862f86aca216833ebfbf66fead68481239c6a7560a067c39a18bb9c3351253862d1f8b5deda8802695cef7baa12b1dc08ac367cefceb0ff02f13f94f7dcad921db5f628c0a0e02cdec8eb83845f36808ff182510f70ac8ffe30cb1936d7b3731c72e60a17561c2472183c7319ee22da555e86e28dbada8394d118e9daec290f50cb7e2c91c947d0baeb8d75e54df169fff87eed1394f19bf9501f6756c95e40fd600ff8d2ee185c2426bc16d3d51cd8841693c85e8561140878a39a34e02c857879d1bd8063cdc09e9454dbc36efad289109f2684e8e126da0c8afe9f038c2ee8cd1aed9df638bdf414085ddc000a1921f28e31489a0e0c85de65cf4b1479c3550fae58fa509c5eb631141f188dc2755853b43962b711279864e579a02ace0613fb52048fa5380d7b94fda84a9f2333b18fbcb19b5c27641abca403c2b796c9c1ef7c33729e13ce8db70ca21acc18375b4cfcc43a6c242e28f8c7ab0d6ca91bcc31b2abd560f6c00393366e0a989131c155d7f6ca92b1281d4eb862edc95fd4b15991b804134ac78d85869d404e03e864e221137b94f555d62debe8c2ae5a4c0f33dd32e6fab3126c6e1aaee7c4d8d5a107fe3c8067d7fecae9f516021879ef3c21bf4312e372bfdfdff1948fa988b4d87668e66d46ff16c4d0b8890acfa0d69d67e8d283a62a66ccad7148bef8d8051b7bdd86f5e3cc4022826b1a54cce243bf6bfc30363e1746f3f252c234ff0e9a6b8dd541f1dd2edcecbd171520c45cf477ecd8ac395f59e7053efb8ec22574ef5b080fd12c4a0dfc5c0cc9ae62356e4b872dbf5dd6"}, {0xa8, 0x119, 0x7, "6752c201f8585c197d463eb0d2f65a4b59719953b6c7e6a29f0f2a1e67b28192eeccb836a7134b3d2390d9bf3069c02fd1f302ba0ab6d052941b850dc962759ea56781e8d58087b4134cb9cc197e79eee1219d5b0be2b45cc1d31ec1b16f47f92eea3e9285eca3928ab142388851869a38f548871116939c8b4917065d0e0524f3cf4dc3034cfeed670691f8c9cc80b9b9d980"}, {0x78, 0x11f, 0x143, "744223b6eb14c7111d39d6662a73af750e3ff066df993ef071a5675a52335ab6985320bf978d86a3618587133c4a55a4bf9dcd704199db831a97e60517135c941a8533f4903d9a924e535dbd76f5adc765070210646aa5ae6d4f903d165f08f7e53212dcc148"}, {0x48, 0x0, 0xc55b, "7852cfeb831cc0b2c54d8d197ef8c93874109808dc509801c80a3b36b8844a9e25d6677b09e4638283bf6ca612f7b6aed729118b"}, {0x30, 0x6, 0x2, "9a82a004c56f344a92263c6d9a20454ed88be9cce56dbfdcf015fa1cf03d5b"}, {0xd8, 0x19f, 0x2, "a997cf684bd864f8a428de7c086049b5f48b17950a1a83a11dbba16a1e8ea40bede7ed39084c324847d3ab4e3af61a87ae92d099fb8ceaf3dade6467f4164c0c09da5bf69b566a60e1881995463e28583200b02b1d302b165dfe7c22b89ca3d5619d29cba3aa23f0344dede99602bf8051e165d8fc936b536fd99bfdeb9093a529847b7fbe7291b10efb394696460e2c25052e847d146bbac14a37b14cd0d8d565f29068f0b0e011389e9dfac678d8dfce776f9e5a2e5140f309d8db6881c580a7abee84ca"}, {0x38, 0x117, 0x7, "a071b61f825e29694f5578619de1c151d6bcc97fa403bf90236106e7eee8b5083397ee51cabdcd"}, {0x1010, 0x100, 0x2, "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"}, {0x70, 0x10b, 0x43c, "35ac529896f03b0ce2df960f2d6082d6b1f9f505c2730ee9e5492c0601a20feb556024dab75c73a617ebf84d7acf0f7d7e90e970f6c8b418d27a14f0825d3f83c1119731e950ce9e20887a54eb389a2eaaed858a7d4c61fdd853"}], 0x2338}, 0x2}, {{&(0x7f0000002c40)=@llc={0x1a, 0x0, 0xa1, 0xfffffffffffffbff, 0x6, 0x28a, @remote}, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002cc0)="237e295c6bec7449120b750af5d2ff0232e90bd2c27770976893b6b559bf6dae06209bbfa5560977a9650166dc3140ef25ef841fcd11ad409ca3d737c73a5adb1c5432c5c40748201fd2cf3e5396915ad3092b8550780e00f93b59acf1fcb8b5fbcb3f2e7ac6dfa267adb07f70023be41d0dd0ccd8554e8d9a91ea088728e2827742f91617cb171a50747f5d3333db0dc51b7bcbdebe270b77f092ef2f796acaab36218656d25d11fb2d31359be228ff4ebc6ec89bd2221b6a308366b51da3", 0xbf}], 0x1, &(0x7f0000002dc0)=[{0x68, 0x29, 0x6, "8a78c56857687304f8ad44ea133564b76ab774f22c518d5b46ab3ca50ec6345fc40a90ef72c9b85040dce9f5cdd37952e098a2ab2106aa7c5f82dd75cb02cbf0a95017e3c19fceec2259586d2bbeaa2363b949"}, {0x98, 0x107, 0x5, "89e5cc61efc43b622e4a7a06dfbddfceb6ccd50d5d2396c60315989a2ecf18877767464da4dd0e1fbba8166f4eb55b8d1eca91bb8ad89d09ce2c8916d3c8fb48868e91d1bfea3ba5ca2c6b09c31293e5f6aab2ff4e29461810fb8bcc99b20050ff6b7931dc5fc82023f9d5abf247eadfd6d4e1d332b2647d6d6bc05b0c434415241772a55055"}, {0xa8, 0x11, 0x1, "ad087fc0a9850e151c7c213e802983b3f3e40a91ef165b0c72f57e0663979e37b7a522adbf241801ee59ae11db8ddbf94195e78e1cb06af8eec49b452cf468ac0f68444a1a6ab4ca29262cf657c7e24348a289d05e288b1b17ce5f9431fdf2654d5f0a746b61af14aaf09c8a43e1d3c116f745510da7ce08edaca6df8c9b54e5a4063b8652a3756e255eb475c4d4009dd28080"}, {0xd8, 0x117, 0x3ff, "aac1cd423ad173da3a29a59f2a409bb05dd7a03bb8385bd84a3893b11a45462b7e57eaabeac82bae191c0a8e5bab19dc806a353dff80ab9aaa5f41eca343b0f917baa43d772c9a6ffa900affa9a41f26c943bf51769645ac8551450f60711f974c0ec191841d68673212da8d415d88f0c3e4692b23ed49fa93ceb71d45dded92bad298d24e6b0b95d17ab2eeab360355e19b31dd1c69248dd0029853ead4841607877a162e104bf117890663da419edf2d426a038697efc8c87ae34c73cb083eee0255bf2d"}], 0x280}}, {{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000003040)="8239d3b91788aee94acf2ef40826cd61fcc600d31f9549f3511b32aa1b1a03cb461742163f27759e905fb9a2d417246118e7b2189dbfbe78c734ed31dacb4cb064dd8d826d1026f4cc33a755644a4da355f9da47007f9aeba43fd1c2797e7c350a66e1863426f1a7e98de7d2d66369083c72476e4bd69aae7ab332d7a933f0e88e0736754d53e77a50cb88aed591642ef8c4d212ecda8d6a0da8ced8d4a0313109d3f1d8eefd8ee07bfa1708854040acb136dcf465b7f086fbfbe4ce229677ba4d5adbf592a8f95e5380b15186cf7f69b6ba5f089d9d777668d1e627b0c59024da229d4058511b7c7e", 0xe9}, {&(0x7f0000003140)="b36c5a0247653c578780a7d66ff24c2ed6317e5df855490ec7b5ab20e1", 0x1d}, {&(0x7f0000003180)="7567ce4fa8a651", 0x7}, {&(0x7f00000031c0)="36c0c4d7aa28359d0d5b7eac31f8c2e4318e204683dfba835f4ee5b0cc0c3f65536cf65841fcea76a0f5c04173ce306b1e53aac426537f39d5c01bc68ca22c5eadb137ad06696b5b8f9fb1fcc7e335ad257a784094b6667fb90287aedc4fac93da666bbe8e85a457e4ae0f33095cb064", 0x70}], 0x4, &(0x7f0000003280)=[{0x30, 0x11d, 0x1, "c6c2b57a7027d8152c158bd0650ecb243565b5463b80f319e65db061bd9d"}], 0x30}, 0x1ff}, {{&(0x7f00000032c0)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @broadcast}, 0x2, 0x2, 0x3, 0x2}}, 0x80, &(0x7f0000003480)=[{&(0x7f0000003340)="c575b982af9005cb5e11f44ac52bcf687b74c9a26a3ea96973b41f1017caed1c5d33c041f15bd529b2ab6b243143d8", 0x2f}, {&(0x7f0000003380)="95c390c770fe120a22246305274727d32f", 0x11}, {&(0x7f00000033c0)="4ce7b9fb223f7b271bd092d7541c35713c8d70b67fdfe3c29633fc4ae9a9ef7a82e7ff212358faee80a42adb47f88066a10e8f39bd8c65b1d0e7787ea17795abeaafd1694bff1ac9c41b7622316bc62460639cc9b9fc96c14ba61b6fdde225141265fe7f5fac931fd1438ad71393f55ccfd47226b9820f6617658d6510daa58608b5fe6f4ff1c392e8f2c3b55d13cae26adb0acd38968f748ab7f08f93dc3d6233e504624ed677087d", 0xa9}], 0x3}, 0x7ff}, {{&(0x7f00000034c0)=@xdp={0x2c, 0x2, r1, 0xa}, 0x80, &(0x7f0000003640)=[{&(0x7f0000003540)="fb61c1d12d5356357cc7988a0c9fbea681a120351f6bfac59d4e0ccc00ea6e6c6af2c080c4579114c1a2ad5bf8321521de904c75cc6987fd9576ee20c3a22efc4600467f984250ae4de4c7005313fd69a4b87fa2513aadc40e819f12bfee1378342dd15ee8a86acbcd2981f74fce70cbfe4bc32715619b0bd02b8ed7ac9c943b3897aa93cbaa0dc1bd198aa43331b830b0e7d60481ca8f28c307214ada3dbe793e0a907b1239c287a64b68919fd43f7a731fc2fea138884a40fcc63a3002c56a7fd7494d13b3df881a3a3d6e34b871d7a09fe295859d1cc8d159680e33ee7c48ca99d13b1c0b80bbbdc99566954c", 0xee}], 0x1, &(0x7f0000003680)=[{0xf8, 0x11b, 0x80, "b8cf14d78ac1725337084b85057d160450b9fe8488579050cd816efdba67bcecc2edbc141a82f52b21d91f7e32485a40746a0b2d3e07c0eaf84c52a986e8d7491a5841cba9af8d84b7ac6c7642a9ca9ee52a300cf452c5ff3e53b02511485ec2957420fa171bdc1802b7eb12c6defe2b4322492e91a9e95b27a25334a3baf2a10fd67ab439ab252cd34029a0e1cec1f84160ded166fbcdb46b0901449f56703458ccb769dbd6e7c49aff9591005a1ca13bd53d8cc6fce3b101283368b2c22c3a69f3c4edd9e93009b1e20b5574ed8e2b1c50bec2cbb52a753404ea0fd880b88ca164bb58"}, {0xe8, 0x115, 0x2, "eceb130a153fecaafaeda6d0cf2e94e5f4f9ab00f7900b047ec60c4bdd797b9130f0844acf35a13d9a9b18d93fbd49f5546ed99638abc13ae56a5b32375c78caf3fd4b614da5aca4ae5e338e54bf23e0801ed248f1b67882789bf5cb8aad9409ded0414f27beccd848a15a4e4a97022f9697c600a6fc5e604a8842c7d7debdc5d0eedf64b5a93f6512e07a660f83ebfd354b691e03a20d8623bdaafed4fe4c66b8dbd1325b4c471dc0a8baa2c160ed430fcb07f988df7714b6a91b98320a54589cbf14ecd76f08a4899af5453912547f14d251cf0d332534"}, {0x40, 0x11f, 0x4, "1bda4e75f400343fb9b7f20929c7c2c7e38a6cd976e78fbfa81e4090b0697377683c2346dfcce90e7c96429665"}, {0x48, 0x111, 0xe00, "61ce69256f6ccbc2f531438dc906091118aa7d569a705c941c48551d23b55217aef201672b0e7978cd305f56ae3bb49a469066473cc7e432"}, {0x30, 0x19b, 0x3f, "ca1f21ab9966a99ad3f623027fc3881063ff498d4a9cd8639ad09c7f469ae8"}], 0x298}, 0x7}, {{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000003940)="d4982481bcb1cd20cac3c25b3d0253858db5345775bfd32930e115460db5f7517d84343d02f62a7427f6f7ab4560670f38a2960dae", 0x35}, {&(0x7f0000003980)="95d4c9dab6e86e49581c9db65f55890cd1862381a19cac314cd9337e3f1573183cc5ce1d8bee542eb7", 0x29}], 0x2, &(0x7f0000003a00)=[{0x1010, 0x108, 0x3d43, "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"}], 0x1010}, 0x1}], 0x7, 0x80) [ 292.110447] binder: 12637:12641 ERROR: BC_REGISTER_LOOPER called without request [ 292.118292] binder_transaction: 2 callbacks suppressed [ 292.118326] binder: 12637:12641 transaction failed 29189/-22, size 0-0 line 2896 [ 292.214048] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 292.222798] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x400, 0x0) ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f0000000200)={0x1, [0x4f6]}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000080)={'ah\x00'}, &(0x7f00000000c0)=0x1e) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000240)={0x67, 0x7fff, 0x0, 0x7, 0x20, 0x7c, 0x1, 0xcd7, 0x9, 0x9}, 0xb) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:18:41 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(0xffffffffffffffff, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) [ 292.293973] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 292.297000] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 292.322785] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x267, 0x801) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80803, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x12}) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:41 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(0xffffffffffffffff, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) 01:18:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000000)={0x0, 0xd46, 0x100000001}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x400000, 0x0) sendmsg$rds(r3, &(0x7f0000000e80)={&(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/111, 0x6f}, {&(0x7f0000000300)=""/183, 0xb7}, {&(0x7f00000003c0)=""/203, 0xcb}, {&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000240)=""/4, 0x4}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f00000004c0)=""/160, 0xa0}, {&(0x7f0000000580)=""/20, 0x14}, {&(0x7f00000005c0)=""/127, 0x7f}], 0x9, &(0x7f0000000bc0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x35e, 0xa28}, &(0x7f0000000700)=0x5, &(0x7f0000000740)=0xff, 0x7, 0x4, 0x0, 0x6b, 0x5, 0x40}}, @mask_cswp={0x58, 0x114, 0x9, {{0x4, 0x8}, &(0x7f0000000780)=0x1f, &(0x7f00000007c0)=0x3d90, 0x7c, 0x45c, 0x2, 0x5, 0x2, 0x1ee6}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x200}, @fadd={0x58, 0x114, 0x6, {{0x6, 0x39}, &(0x7f0000000800), &(0x7f0000000840)=0x100, 0x1, 0x81, 0x0, 0x0, 0x20, 0x7}}, @mask_cswp={0x58, 0x114, 0x9, {{0x2, 0x6}, &(0x7f0000000880)=0x1, &(0x7f00000008c0)=0x1, 0x6, 0x400, 0xffffffff, 0x3, 0x40, 0xffff}}, @fadd={0x58, 0x114, 0x6, {{0x9, 0x68d0}, &(0x7f0000000900)=0x7, &(0x7f0000000940)=0x2, 0xbff, 0x8, 0xe, 0x40, 0x50, 0x52e9}}, @rdma_dest={0x18, 0x114, 0x2, {0xfffffffffffffc01, 0x2}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000980)=""/114, 0x72}, &(0x7f0000000a00), 0x24}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000a40)=""/180, 0xb4}, &(0x7f0000000b00), 0x1}}, @cswp={0x58, 0x114, 0x7, {{0x0, 0x100}, &(0x7f0000000b40)=0x3, &(0x7f0000000b80)=0xcfd, 0xff, 0x0, 0x5498, 0x366, 0x2, 0xfffffffffffffffd}}], 0x2a0, 0x40084}, 0x10) [ 292.616070] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 292.651422] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 292.781832] binder: undelivered TRANSACTION_ERROR: 29189 01:18:41 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x0, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) 01:18:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0), 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 292.948739] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 292.965287] binder: 12684:12686 ERROR: BC_REGISTER_LOOPER called without request [ 293.002422] binder: 12686 RLIMIT_NICE not set [ 293.018944] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 01:18:42 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c56", 0x10}], 0x1) close(r2) socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x661febad, 0x2) 01:18:42 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x0, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) [ 293.057452] binder: 12684:12689 ERROR: BC_REGISTER_LOOPER called without request [ 293.065663] binder: 12684:12689 transaction failed 29189/-22, size 0-0 line 2896 01:18:42 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:18:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1ffbfffffe) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:18:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x810100000890c, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) r2 = dup(r1) ioctl$KDDISABIO(r2, 0x4b37) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:42 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x0, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) [ 293.318106] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 01:18:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x10) 01:18:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0xfffffffffffffffe, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:18:42 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) [ 293.622857] __nla_parse: 5 callbacks suppressed [ 293.622967] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:42 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 293.701760] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 293.735085] binder: undelivered TRANSACTION_ERROR: 29189 01:18:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0), 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000100)={0xb2, 0x4, 0x1}) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x24, r3, 0x308, 0x70bd25, 0x25dfdbfc, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x4}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000041}, 0x40008d0) fdatasync(r0) r4 = socket$inet(0x10, 0x2, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x3, &(0x7f0000000140), 0x4) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000180)={0x1, @capture={0x1000, 0x1, {0x1f, 0x1ff}, 0x101, 0x7fff}}) sendmsg(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x200000000000) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40, 0x0) ioctl$BLKROTATIONAL(r5, 0x127e, &(0x7f0000000040)) [ 293.957224] binder: 12731:12732 ERROR: BC_REGISTER_LOOPER called without request [ 293.996626] binder: 12732 RLIMIT_NICE not set [ 294.033774] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 294.043608] binder: 12731:12737 ERROR: BC_REGISTER_LOOPER called without request [ 294.052584] binder: 12731:12737 transaction failed 29189/-22, size 0-0 line 2896 01:18:43 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c56", 0x10}], 0x1) close(r2) socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) splice(r0, 0x0, r2, 0x0, 0x661febad, 0x2) 01:18:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x101000, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) 01:18:43 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) [ 294.075700] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:18:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0xa1, 0x0, 0xfffffffffffffffc, "527693bb22006400e770f4c9eb8db9dd", "7a7910ede94904080c35b0bc0679ea4c3a94aa67fe604a9c4c493c0a4b910da53aadfa093cee31f9ed457c54d62002d4655adbf7f6efcccf703448c2d1892414994f8d3e86095c77170098aa7fd057da178f598ae95ef45c4088a27aab009f46174677d33a2f281836187deaaf3e3ebcb26b4f4ac24ea0b40efa27ad9c20f120a33ebadc36d294cae47774c8"}, 0xa1, 0x1) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:43 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c56", 0x10}], 0x1) close(r2) socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) splice(r0, 0x0, r2, 0x0, 0x661febad, 0x2) 01:18:43 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) [ 294.457705] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000080)={0x1, 0xfffffffe000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:18:43 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c56", 0x10}], 0x1) close(r2) socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) splice(r0, 0x0, r2, 0x0, 0x661febad, 0x2) [ 294.511093] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:43 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) [ 294.752464] binder: undelivered TRANSACTION_ERROR: 29189 01:18:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0xffffffffffffff01) r2 = socket$inet(0x10, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000140)=[@sack_perm, @timestamp, @sack_perm, @window={0x3, 0x9872, 0x2}, @mss={0x2, 0x2c81}, @mss={0x2, 0x6}], 0x6) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) bind$isdn_base(r1, &(0x7f00000000c0)={0x22, 0x7f, 0x20, 0xa005, 0x6}, 0xfffffffffffffd54) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) 01:18:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0), 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:43 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c56", 0x10}], 0x1) close(r2) socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x661febad, 0x2) 01:18:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 294.965022] binder: 12781:12784 ERROR: BC_REGISTER_LOOPER called without request [ 294.988420] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:44 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) 01:18:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 295.042955] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 295.062363] binder: 12781:12784 ERROR: BC_REGISTER_LOOPER called without request [ 295.071195] binder: 12781:12784 transaction failed 29189/-22, size 0-0 line 2896 01:18:44 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2002, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f00000000c0)={0x9, 0x5, 0x8}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind$isdn_base(r1, &(0x7f0000000000)={0x22, 0x3, 0x1000, 0x8001, 0x3}, 0x6) ioctl(r1, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") sendmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:18:44 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) 01:18:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000040)={0x1}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000000)) 01:18:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8, 0x400002) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x810, r2, 0x180000000) [ 295.606875] validate_nla: 8 callbacks suppressed [ 295.606895] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 295.619609] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:44 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}], 0x1, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) 01:18:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000040)={0xffffffff80000001, 0x34343459, 0xfffffffffffffffd, 0x5, 0x0, @discrete={0x1ff, 0x49bc}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 295.694250] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 295.702346] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 295.771905] binder: undelivered TRANSACTION_ERROR: 29189 01:18:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:18:44 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c56", 0x10}], 0x1) close(r2) socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x661febad, 0x2) 01:18:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x9, &(0x7f0000000000)="0ab91f123c95da795fec6c154c579c5f0527") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:45 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}], 0x1, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) [ 296.015727] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 296.105860] binder: 12834:12836 ERROR: BC_REGISTER_LOOPER called without request 01:18:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x40) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000040), 0x4) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 296.167562] binder: 12834:12836 transaction failed 29189/-22, size 0-0 line 2896 [ 296.196503] binder: undelivered TRANSACTION_ERROR: 29189 01:18:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x40000, 0x0) ioctl$RTC_VL_CLR(r2, 0x7014) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') msgget$private(0x0, 0x9) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r4, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:18:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 296.381163] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 01:18:45 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}], 0x1, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) [ 296.428360] binder: 12849:12851 ERROR: BC_REGISTER_LOOPER called without request [ 296.465460] binder: 12849:12851 transaction failed 29189/-22, size 0-0 line 2896 01:18:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), 0x1, 0x0, 0x43}, 0x4000000) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x5, 0x0, [{0xae7, 0x0, 0x13c000000000}, {0xb7f, 0x0, 0xdbe}, {0xc0011b7f, 0x0, 0x4}, {0xa5a, 0x0, 0x101}, {0x98f, 0x0, 0x200}]}) [ 296.543433] binder: 12849:12857 transaction failed 29189/-22, size 0-0 line 2896 [ 296.573991] binder: undelivered TRANSACTION_ERROR: 29189 [ 296.580845] binder: undelivered TRANSACTION_ERROR: 29189 01:18:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:18:45 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) [ 296.768335] binder: 12866:12868 transaction failed 29189/-22, size 0-0 line 2896 [ 296.786950] binder: undelivered TRANSACTION_ERROR: 29189 01:18:46 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c56", 0x10}], 0x1) close(r2) socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x661febad, 0x2) 01:18:46 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x10000, 0x0) getsockname$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x1c) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x1, 0x8000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x8) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:18:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x82, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0x8001, @ipv4={[], [], @loopback}, 0x1ff}}, 0x4b, 0x2, 0x1, 0x1, 0x6}, &(0x7f0000000000)=0x98) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000040)=r2, 0x4) 01:18:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000240)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:46 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) 01:18:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf544ebf36602e6ba93ed32b31186cb43b298e74b7cf2ecbffe3b4b8fd603c665ca3a5b7dac20cc220c231df4353590be2670ed17a62326ffa21c5f91e89fa43216b2637324cad06468769b93792cd5a095b427928617951b8cee9dd5519438fd3e2bd", 0xad}], 0x1}, 0x0) [ 297.149235] binder_thread_write: 2 callbacks suppressed [ 297.149258] binder: 12886:12887 ERROR: BC_REGISTER_LOOPER called without request 01:18:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 297.266907] binder: 12886:12887 transaction failed 29189/-22, size 0-0 line 2896 [ 297.309432] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 297.342111] binder: 12886:12893 ERROR: BC_REGISTER_LOOPER called without request [ 297.349806] binder: 12886:12893 transaction failed 29189/-22, size 0-0 line 2896 01:18:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm_plock\x00', 0x40, 0x0) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f00000004c0)={0xfffffffffffff558, 0x80008, "c486f92821b772fe78c3c12bb4bf3fbfbe7effd5369e25db", {0x2}, 0x5}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f00000001c0)="b1bae229a8b5fa0c77dfbacdd02938d609e9cf2f0d71142177b15b94d2ae9159f04c05d51759ede7661c4543cb60fd7cb55a2028ca29d36d94abbf561de59a87f38b5f0766eb424f5814b694f9187f153962e80de5798bc8c380a4cfdc879af1dc9b8744f19f960e63b1a83a58b6cdd272c2e3", 0x73}], 0x1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x2000, 0x0) getpeername$unix(r4, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e) r5 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_QUERY(0x18, r5, 0x0, &(0x7f0000000300)='cgroup\x00', &(0x7f0000000340)) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:shadow_t:s0\x00', 0x1e, 0x3) 01:18:46 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x8}, {}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) [ 297.382263] binder: undelivered TRANSACTION_ERROR: 29189 [ 297.387836] binder: undelivered TRANSACTION_ERROR: 29189 01:18:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000240)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) prctl$PR_SET_FPEMU(0xa, 0x3) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000000)={'ip6_vti0\x00', 0x3}) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 297.636099] binder: 12910:12912 ERROR: BC_REGISTER_LOOPER called without request [ 297.674302] binder: 12910:12912 transaction failed 29189/-22, size 0-0 line 2896 [ 297.786932] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 01:18:47 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c56", 0x10}], 0x1) close(r2) socket$netlink(0x10, 0x3, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x661febad, 0x2) 01:18:47 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) 01:18:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000240)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:18:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:18:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x1ff, 0x4) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x109000, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000440)=""/4096) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 298.058064] binder: 12923:12929 ERROR: BC_REGISTER_LOOPER called without request [ 298.117865] binder: 12923:12929 transaction failed 29189/-22, size 0-0 line 2896 [ 298.156102] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 298.167497] binder: 12923:12935 ERROR: BC_REGISTER_LOOPER called without request [ 298.175491] binder: 12923:12935 transaction failed 29189/-22, size 0-0 line 2896 01:18:47 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) [ 298.208456] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 298.215424] binder_release_work: 1 callbacks suppressed [ 298.215440] binder: undelivered TRANSACTION_ERROR: 29189 [ 298.227452] binder: undelivered TRANSACTION_ERROR: 29189 01:18:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8, 0x0) connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, {0x7, 0xffffffff, 0x7, 0x3, 0x7f, 0x5}, 0x3}, 0xa) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:18:47 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) [ 298.497076] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 298.502393] binder: 12951:12952 ERROR: BC_REGISTER_LOOPER called without request [ 298.577019] binder: 12951:12956 transaction failed 29189/-22, size 0-0 line 2896 01:18:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = getpid() timer_create(0x5, &(0x7f0000000040)={0x0, 0x3, 0x0, @tid=r1}, &(0x7f0000000080)) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000100)={0x5, 0x4, 0x9, 0x2, 0xb0}) r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 298.729106] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 298.737225] __nla_parse: 7 callbacks suppressed [ 298.737246] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 298.829409] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:48 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c56", 0x10}], 0x1) close(r2) socket$netlink(0x10, 0x3, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x661febad, 0x2) 01:18:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200440, 0x2) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000000200)={0x7b, 0x0, [0x7f, 0x9, 0x2, 0x9]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7, 0x800) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r2) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000000040)={0x6, {{0xa, 0x4e20, 0x2, @rand_addr="4d1c93a69dc172ef9d819b3f8632fb85", 0x4}}}, 0x88) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:18:48 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) 01:18:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:18:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x41}], 0x1}, 0x0) [ 299.040574] binder: 12979:12981 ERROR: BC_REGISTER_LOOPER called without request [ 299.085372] binder: 12979:12981 transaction failed 29189/-22, size 0-0 line 2896 01:18:48 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) 01:18:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:18:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0xffffffffffffff00, @ipv4={[], [], @remote}, 0x2}, @in6={0xa, 0x4e20, 0x2988, @local}, @in6={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, [], 0x14}, 0xffffffffffffff8e}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, [], 0x17}, 0x200}], 0x283) [ 299.395697] binder: 12995:12996 ERROR: BC_REGISTER_LOOPER called without request [ 299.428904] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:48 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x8}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) [ 299.445254] binder: 12995:12996 transaction failed 29189/-22, size 0-0 line 2896 [ 299.485906] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:48 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c56", 0x10}], 0x1) close(r2) socket$netlink(0x10, 0x3, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x661febad, 0x2) 01:18:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 01:18:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$setperm(0x5, r2, 0x100000000) clock_settime(0x5, &(0x7f00000000c0)={0x77359400}) 01:18:48 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0}, {r0}], 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x7fffffff}, 0x8) 01:18:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:18:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x181, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000300)=""/4096) [ 299.929563] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 299.938939] binder: 13017:13018 ERROR: BC_REGISTER_LOOPER called without request [ 299.968697] binder: 13017:13018 transaction failed 29189/-22, size 0-0 line 2896 [ 299.985886] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 300.011276] binder: 13017:13018 ioctl c0306201 0 returned -14 01:18:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:18:49 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0}, {r0}], 0x2, 0x0, &(0x7f00000001c0)={0x7fffffff}, 0x8) 01:18:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 01:18:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x400040, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 300.284270] binder: 13040:13044 ERROR: BC_REGISTER_LOOPER called without request 01:18:49 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000017000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000001c0)="0f20e06635800000000f22e066b8a75900000f23c00f21f8663502000d000f23f8ba4300ec660f3a417ba13b66b9800000c00f326635010000000f3066b8008000000f23c00f21f8663500000f000f23f866b93806000066b8e958000066ba000000000f3066b90208000066b8fa8a2ad066bab10d9e6d0f3066b9a70a00000f3266b9ce0900000f32", 0x89}], 0x1, 0x3, &(0x7f00000000c0), 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 300.330295] binder: 13040:13044 transaction failed 29189/-22, size 0-0 line 2896 [ 300.347269] binder: 13040:13044 ioctl c0306201 0 returned -14 01:18:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 300.394063] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 300.526345] binder: 13051:13053 ioctl c0306201 0 returned -14 01:18:49 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c56", 0x10}], 0x1) close(r2) socket$netlink(0x10, 0x3, 0x4) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x661febad, 0x2) 01:18:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:18:49 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x100000001, &(0x7f0000000100)="0a1fe932838b941f71e8165f9b077fba37aaef9ee747926eb85f948b5d931c6f0ce772b53d6de325059794379ae1ba34f0c325509179f4f7b48f261e28495100") r2 = socket$inet(0x10, 0x4, 0x200000000) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)}, 0x2) 01:18:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:18:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000300)=ANY=[@ANYBLOB="08000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c7ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f0000000000)={0x4, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:18:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000200)={'veth0_to_team\x00', 0xff}) r2 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x3, 0x0) ioctl$VIDIOC_G_AUDIO(r2, 0x80345621, &(0x7f00000001c0)) connect(r0, &(0x7f00000000c0)=@generic={0x0, "6110aacbad16c5f77c13d28ef075a4c35c13d3e6819ec8f2e0f0a812beceef353ceec9f5c42ed98f712dfa6e4315b6b75cb7a3727a2535cc5d350d6080334b6e9e594d03f09fca6005d14488847198d788319835cb2f61fef41b2a2f1a43396d020b4787ffaa302d32988110620f5102eb7962d4a56c1c5d0a4e5cbc337a"}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000040), 0x4) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x8) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000140)) 01:18:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 301.097563] validate_nla: 8 callbacks suppressed [ 301.097583] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 301.110413] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:50 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0}, {r0}], 0x2, 0x0, &(0x7f00000001c0)={0x7fffffff}, 0x8) 01:18:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 301.219917] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 301.227977] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x4000) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f0000000040)=""/81) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635000004000f22e0650f01bcc30066b9030100c066b80080000066ba000000000f302ef4f0186d0066b9800000c00f326635001000000f30baf80c66b8b80ca18e66efbafc0c66ed66b9800000c00f326635002000000f30260f07baf80c66b87932d18766efbafc0cb010ee", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:18:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:18:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)={'syz0', "c0f116d3b2be57c61acc0f62f2b5ad07f7782d7eedc9b3f5da3c13572fbf6d4fa3af2a9c3690aacaf8fa4b5b567fbb28988decec76fad425421480a3448449401ea4e2d5d88e8b71f76364b910b4402269885382c14387d35296d75a83cc1d59ca593576272b9216852ab97f03cd62433173"}, 0x76) [ 301.550830] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 301.558852] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 301.573579] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 01:18:50 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c56", 0x10}], 0x1) close(r2) socket$netlink(0x10, 0x3, 0x4) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x661febad, 0x2) 01:18:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:18:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0}) 01:18:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = creat(&(0x7f0000000000)='./file0\x00', 0x40) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800080}, 0xc, &(0x7f0000000440)={&(0x7f0000000100)={0x238, r2, 0x900, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6a}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5805e25e}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x571e}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x20}]}, @TIPC_NLA_BEARER={0xe0, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'eth', 0x3a, 'ip6erspan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x5}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'veth1_to_bridge\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfc}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'veth0_to_hsr\x00'}}]}, @TIPC_NLA_LINK={0xd8, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x20000811}, 0x40) r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:50 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) r1 = dup(r0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$RNDADDENTROPY(r0, 0x5452, &(0x7f0000000080)=ANY=[@ANYBLOB]) [ 301.821739] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 01:18:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0}) [ 301.889413] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 01:18:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:18:51 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0}, {r0}], 0x2, 0x0, &(0x7f00000001c0)={0x7fffffff}, 0x8) 01:18:51 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="23000000550081aee4f80b00000f00fe078bc36f39000000fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) 01:18:51 executing program 1: r0 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRES32], 0x18) write(r0, &(0x7f0000000540)="a6", 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000317000), 0xff8) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = accept4(r1, 0x0, &(0x7f00000000c0), 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000100), &(0x7f00000001c0)=0x4) r3 = socket$inet(0x10, 0x2, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8, 0xc0) sendmsg(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0}) 01:18:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 302.221705] PF_BRIDGE: br_mdb_parse() with unknown ifindex [ 302.250720] binder_thread_write: 6 callbacks suppressed [ 302.250743] binder: 13132:13134 ERROR: BC_REGISTER_LOOPER called without request [ 302.306006] PF_BRIDGE: br_mdb_parse() with unknown ifindex [ 302.331177] binder_transaction: 6 callbacks suppressed [ 302.331210] binder: 13132:13143 transaction failed 29189/-22, size 0-0 line 2896 01:18:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0xc000, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffa000/0x3000)=nil, 0x9, 0x7, 0x49, &(0x7f0000ffb000/0x1000)=nil, 0x3fffffffc}) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = socket$inet(0x10, 0x2, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x40) ioctl$TIOCLINUX5(r3, 0x541c, &(0x7f0000000040)={0x5, 0x8, 0x3, 0x58, 0x800}) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:51 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c56", 0x10}], 0x1) close(r2) socket$netlink(0x10, 0x3, 0x4) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x661febad, 0x2) 01:18:51 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000140a43ba5d806055b6fdd80b40000000140001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) 01:18:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 302.710214] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 302.719055] binder: 13150:13152 ERROR: BC_REGISTER_LOOPER called without request [ 302.752881] binder: 13150:13152 transaction failed 29189/-22, size 0-0 line 2896 [ 302.763589] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 302.780933] binder: 13150:13152 unknown command 0 [ 302.786117] binder: 13150:13152 ioctl c0306201 20000140 returned -22 01:18:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:18:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x807f) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f0000000240)) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x24042, 0x0) getresgid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$TUNSETGROUP(r3, 0x400454ce, r4) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, 0x0, 0x0, 0x0, 0xa5c9, &(0x7f0000000000)='ip6erspan0\x00', 0x6, 0x8, 0xfb}) 01:18:52 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0}, {r0}], 0x2, 0x0, 0x0, 0x0) 01:18:52 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000040)={0x0, 0x2000}) r3 = epoll_create1(0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x0) close(r2) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000140)={0x5}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000100)) write(r1, &(0x7f0000000340), 0x10000014c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x43d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x7, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={0x0}) getsockopt$inet6_dccp_buf(r1, 0x21, 0xcd, &(0x7f0000000180)=""/111, &(0x7f0000000280)=0x6f) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:52 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) 01:18:52 executing program 1: socketpair(0x11, 0x2d74d993aa1e4a55, 0x80000000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 303.205694] binder: 13174:13181 ERROR: BC_REGISTER_LOOPER called without request [ 303.228453] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 01:18:52 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 303.254522] binder: 13174:13181 transaction failed 29189/-22, size 0-0 line 2896 [ 303.276314] binder: 13174:13181 unknown command 0 [ 303.281412] binder: 13174:13181 ioctl c0306201 20000140 returned -22 [ 303.297188] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 01:18:52 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c56", 0x10}], 0x1) close(r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x661febad, 0x2) 01:18:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000540)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000002c0)={0x260d01610d135c37, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000240)='-'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@reply_sg={0x630b, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 01:18:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x1000080807, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:52 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 303.645593] binder: 13197:13198 ERROR: BC_REGISTER_LOOPER called without request 01:18:52 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x184, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x296}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_NET={0x4c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x81}]}, @TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = socket$inet(0x10, 0x2, 0x800000000000) sendmsg(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 303.697280] binder: 13197:13198 transaction failed 29189/-22, size 0-0 line 2896 [ 303.715296] binder: 13197:13198 unknown command 0 [ 303.720256] binder: 13197:13198 ioctl c0306201 20000140 returned -22 01:18:52 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 303.856962] __nla_parse: 9 callbacks suppressed [ 303.856983] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 303.894491] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:53 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0}, {r0}], 0x2, 0x0, 0x0, 0x0) 01:18:53 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000040)={0x0, 0x2000}) r3 = epoll_create1(0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x0) close(r2) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000140)={0x5}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000100)) write(r1, &(0x7f0000000340), 0x10000014c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x43d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x7, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={0x0}) getsockopt$inet6_dccp_buf(r1, 0x21, 0xcd, &(0x7f0000000180)=""/111, &(0x7f0000000280)=0x6f) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:53 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) 01:18:53 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:18:53 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x400000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000000c0)={0x7fff, 0x2, 'client0\x00', 0xffffffff80000000, "35ec3f8d06c8f42f", "0e6770e8cb9296009bffc0086c38b90924709b3ad7779794cde4f7a954d0a64c", 0x5, 0x40}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x1, @broadcast}}, 0x1e) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) socket$bt_rfcomm(0x1f, 0x5, 0x3) fchdir(r2) [ 304.333179] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 304.356575] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:53 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:18:53 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c56", 0x10}], 0x1) close(r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x661febad, 0x2) 01:18:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x62, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000040)=0x6) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = socket$inet(0x10, 0x2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x4010, r0, 0x0) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:53 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) r3 = syz_open_dev$mice(0x0, 0x0, 0x418040) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mremap(&(0x7f000001b000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000022000/0x4000)=nil) syz_genetlink_get_family_id$nbd(0x0) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffc) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000500)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800e00000000000000000000000000000000000000000000000000048004354000000000000000000000000000000000000000000000000000000000000080004000000010000006e657462696f732d6e7300000000000000000000800000000000000000000000ffffffff000000000000000076657468315f746f5f7465616d00000076657468315f746f5f7465616d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000002e00016800000000000000000000000000009800c00000000000000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020200050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000"], 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x20000, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) 01:18:53 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 304.691956] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 304.772948] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000001a0007041dffe9946f619e37285e27210500020000001f0000000020080008001d0004008fad000000001200000000000000f24d8238cfa43ff10cc49da32465019137b9993edc22b16e9085af6d213f7741104d3c425cb8414be278c280411890cb6bd55c0ca873ccd45173d8f87cbc93ff7823986655a5156a248aee9c4e12ac5756e9218309c63c2b88bb41013ad55aa70cb339ddf3302dc61275008a96a099e1df985033d5b5b3884b1535df96acec5977c4d89da133afcb710dbfe7cb2a26a8e3057e3c51b59073268a01", 0xd1}], 0x1}, 0x800) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x10000, 0x0) accept4$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x1c, 0x800) 01:18:54 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0}, {r0}], 0x2, 0x0, 0x0, 0x0) 01:18:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x5, 0x8, 0x0, 0x1, 0x3, 0x100000000, 0x4, 0x2, 0x2, 0x4, 0x6, 0x7ff, 0x6, 0x6, 0x4, 0x80000001, 0x8000, 0xe3a, 0x9, 0xe6, 0xef9, 0x80, 0x3, 0xfffffffffffffffa, 0x2e, 0x5f8dd0a2, 0x8000, 0x1ff, 0x600000000000000, 0x1, 0x6, 0x7]}) ioctl(r0, 0x8, &(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x6) 01:18:54 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000040)={0x0, 0x2000}) r3 = epoll_create1(0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x0) close(r2) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000140)={0x5}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000100)) write(r1, &(0x7f0000000340), 0x10000014c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x43d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x7, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={0x0}) getsockopt$inet6_dccp_buf(r1, 0x21, 0xcd, &(0x7f0000000180)=""/111, &(0x7f0000000280)=0x6f) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:54 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:18:54 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) r3 = syz_open_dev$mice(0x0, 0x0, 0x418040) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mremap(&(0x7f000001b000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000022000/0x4000)=nil) syz_genetlink_get_family_id$nbd(0x0) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffc) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000500)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800e00000000000000000000000000000000000000000000000000048004354000000000000000000000000000000000000000000000000000000000000080004000000010000006e657462696f732d6e7300000000000000000000800000000000000000000000ffffffff000000000000000076657468315f746f5f7465616d00000076657468315f746f5f7465616d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000002e00016800000000000000000000000000009800c00000000000000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020200050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000"], 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x20000, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) [ 305.317429] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 305.352889] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8, 0x80400) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0xffffffffffffffff) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 305.617255] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:54 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c56", 0x10}], 0x1) close(r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x661febad, 0x2) 01:18:54 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000015c0)='/proc/self/net/pfkey\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000001600)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = msgget$private(0x0, 0x248) msgrcv(r2, &(0x7f0000000580)={0x0, ""/4096}, 0x1008, 0x0, 0x2000) ioctl(r1, 0x3ff, &(0x7f0000000080)='p\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f0000000500)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @local}, {0x2, 0x4e20, @multicast2}, 0x83, 0x0, 0x0, 0x0, 0x3f, &(0x7f00000004c0)='bcsh0\x00', 0x6, 0x4b, 0xffffffff}) r4 = socket(0xb, 0xf, 0x3) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=@gettaction={0x50, 0x32, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0x14, 0x1c, @TCA_ACT_KIND={0xc, 0x1, 'pedit\x00'}}, {0x14, 0x12, @TCA_ACT_KIND={0xc, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x63}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x800) sendto$inet(r1, &(0x7f00000001c0)="215d5cccae87c79bab15b25210fd0d41414479481323c6c3", 0x18, 0x4010, 0x0, 0x0) sendmsg(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000240)=ANY=[@ANYBLOB="030000000000000002000000000000004b00000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000f1ffdbcd51ed865e0050070000007d7e0f009f01000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000005f00000000000001a00000000000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000f1ffffff"]) 01:18:54 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:18:54 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) r3 = syz_open_dev$mice(0x0, 0x0, 0x418040) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mremap(&(0x7f000001b000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000022000/0x4000)=nil) syz_genetlink_get_family_id$nbd(0x0) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffc) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000500)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800e00000000000000000000000000000000000000000000000000048004354000000000000000000000000000000000000000000000000000000000000080004000000010000006e657462696f732d6e7300000000000000000000800000000000000000000000ffffffff000000000000000076657468315f746f5f7465616d00000076657468315f746f5f7465616d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000002e00016800000000000000000000000000009800c00000000000000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020200050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000"], 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x20000, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) [ 305.926418] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:55 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:18:55 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0}, {r0}], 0x2, 0x0, &(0x7f00000001c0), 0x8) 01:18:55 executing program 3: syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x2, 0x0) 01:18:55 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:18:55 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000040)={0x0, 0x2000}) r3 = epoll_create1(0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x0) close(r2) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000140)={0x5}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000100)) write(r1, &(0x7f0000000340), 0x10000014c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x43d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x7, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={0x0}) getsockopt$inet6_dccp_buf(r1, 0x21, 0xcd, &(0x7f0000000180)=""/111, &(0x7f0000000280)=0x6f) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 01:18:55 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c56", 0x10}], 0x1) socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x661febad, 0x2) [ 306.690993] validate_nla: 10 callbacks suppressed [ 306.691014] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 01:18:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4e4080, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=0x0, &(0x7f00000000c0)=0x4) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000100)={r2, 0x80000001, 0x6}, 0x8) r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:55 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:18:55 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) [ 306.994532] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 306.996688] ptrace attach of "/root/syz-executor.3"[11135] was attempted by "/root/syz-executor.3"[13346] [ 307.043399] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 01:18:56 executing program 3: prctl$PR_SET_NAME(0xf, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f000000bb80), 0x40001b9, 0x0) 01:18:56 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0}, {r0}], 0x2, 0x0, &(0x7f00000001c0), 0x8) 01:18:56 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:18:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000100)={0x30, 0x4, 0x0, {0x3, 0x9, 0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x30) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000040)={0x802b, 0x2}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000000c0)={0x4}, 0x4) 01:18:56 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000040)={0x0, 0x2000}) r3 = epoll_create1(0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x0) close(r2) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000140)={0x5}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000100)) write(r1, &(0x7f0000000340), 0x10000014c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x43d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x7, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={0x0}) getsockopt$inet6_dccp_buf(r1, 0x21, 0xcd, &(0x7f0000000180)=""/111, &(0x7f0000000280)=0x6f) [ 307.485364] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 307.550098] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 01:18:56 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:18:56 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c56", 0x10}], 0x1) socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x661febad, 0x2) 01:18:56 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x5, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0285628, &(0x7f0000000040)={0x0, "8b3254c28fd6bf69d370f99c37deaa94c0cb008dfeab0493aa6622164db2340d"}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@loopback, @in=@initdev}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) 01:18:56 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, 0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mremap(&(0x7f000001b000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000022000/0x4000)=nil) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffc) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 01:18:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x638, 0x8083) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x0, 0x0, 0x3f, 0x0, [0xfffffffe]}) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f00000001c0)=@v1={0x1000000, [{0x2, 0x9}]}, 0xc, 0x2) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:57 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 308.093999] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 01:18:57 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0}, {r0}], 0x2, 0x0, &(0x7f00000001c0), 0x8) [ 308.154293] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 01:18:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:18:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") fsetxattr$security_ima(r0, &(0x7f0000000000)='security.ima\x00', &(0x7f00000000c0)=@v2={0x0, 0x2, 0x7, 0x4, 0xf8, "2880e1b88d296841324d67327dea40026691dae6ff1919ff9f9ae20726c06fe6e5110ee178879e4a4392d9e6101b439940ba3a144c604740208302e75ec239cbbd630e4a42064a3564b93386d2d0d2419789b336f9f8abfaac47c07f74504f4611d3134f8d569f6906f1111c2974164d62bf5ca255fd1ba028eb7c3a160e442b2e5d493e7ba298768f7c6cc40feb2257b3b1688d8e793281f14af84fab01e3fb3c2fabc4f1164a40ac58a2d4071bf1fad6a913187de4906694eadcbafb79788b9e8fb46c7044b52f4ec51b6c29853f9bef1c13cf384bc008ef29cedecd1b47942e9eafd65f8944b6cec085d978dfdcbaf4cbbfd766ecddda"}, 0x102, 0x2) socket$inet(0x10, 0x2, 0x0) 01:18:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21e7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:18:57 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000040)={0x0, 0x2000}) r3 = epoll_create1(0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x0) close(r2) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000140)={0x5}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000100)) write(r1, &(0x7f0000000340), 0x10000014c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x43d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x7, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={0x0}) 01:18:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") clock_gettime(0x3, &(0x7f0000009340)={0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000094c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0x6) recvmmsg(r0, &(0x7f0000009000)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000000c0)=""/176, 0xb0}, {&(0x7f0000000180)=""/216, 0xd8}, {&(0x7f0000000280)=""/223, 0xdf}, {&(0x7f0000000440)=""/145, 0x91}, {&(0x7f0000000380)=""/13, 0xd}, {&(0x7f0000000500)=""/201, 0xc9}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x7, &(0x7f0000001680)=""/71, 0x47}, 0x8be}, {{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000001700)=""/234, 0xea}, {&(0x7f0000001800)=""/139, 0x8b}, {&(0x7f00000018c0)=""/242, 0xf2}, {&(0x7f00000019c0)=""/135, 0x87}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/39, 0x27}, {&(0x7f0000002a80)=""/246, 0xf6}], 0x7, &(0x7f0000002c00)=""/4096, 0x1000}, 0x9}, {{0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000003c00)=""/223, 0xdf}, {&(0x7f0000003d00)=""/214, 0xd6}, {&(0x7f0000003e00)=""/161, 0xa1}, {&(0x7f0000003ec0)=""/115, 0x73}, {&(0x7f0000003f40)=""/64, 0x40}, {&(0x7f0000003f80)=""/250, 0xfa}, {&(0x7f0000004080)=""/19, 0x13}, {&(0x7f00000040c0)=""/133, 0x85}, {&(0x7f0000004180)=""/225, 0xe1}, {&(0x7f0000004280)=""/118, 0x76}], 0xa}, 0x7}, {{&(0x7f00000043c0)=@nl=@proc, 0x80, &(0x7f0000006500)=[{&(0x7f0000004440)=""/4096, 0x1000}, {&(0x7f0000005440)=""/4096, 0x1000}, {&(0x7f0000006440)=""/148, 0x94}], 0x3}, 0x9}, {{&(0x7f0000006540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000087c0)=[{&(0x7f00000065c0)=""/253, 0xfd}, {&(0x7f00000066c0)=""/4096, 0x1000}, {&(0x7f00000076c0)=""/4096, 0x1000}, {&(0x7f00000086c0)=""/233, 0xe9}], 0x4, &(0x7f0000008800)=""/125, 0x7d}, 0x9}, {{&(0x7f0000008880)=@xdp, 0x80, &(0x7f0000008ac0)=[{&(0x7f0000008900)=""/197, 0xc5}, {&(0x7f0000008a00)=""/190, 0xbe}], 0x2, &(0x7f0000008b00)=""/30, 0x1e}, 0x20}, {{&(0x7f0000008b40)=@tipc, 0x80, &(0x7f0000008f40)=[{&(0x7f0000008bc0)=""/233, 0xe9}, {&(0x7f0000008cc0)=""/200, 0xc8}, {&(0x7f0000008dc0)=""/62, 0x3e}, {&(0x7f0000008e00)=""/28, 0x1c}, {&(0x7f0000008e40)=""/164, 0xa4}, {&(0x7f0000008f00)=""/52, 0x34}], 0x6, &(0x7f0000008fc0)=""/39, 0x27}, 0x10001}], 0x7, 0x1, &(0x7f0000009200)={r1, r2+30000000}) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r3, 0x111, 0x4, 0x1, 0x4) r4 = socket$inet(0x10, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000091c0)={0x0, 0x5}, &(0x7f0000009380)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000009440)={r5, 0x74, &(0x7f00000093c0)=[@in6={0xa, 0x4e23, 0x1, @remote, 0x2d28}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, [], 0x1e}, 0x100000001}, @in6={0xa, 0x4e23, 0xffffffff, @remote, 0x1000}]}, &(0x7f0000009480)=0x10) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000009240)={0x0, 0x3f, 0x20}, &(0x7f0000009280)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000092c0)={0x9, 0x3, 0x6, 0xfffffffffffffffe, r6}, &(0x7f0000009300)=0x10) sendmsg(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)}, 0x0) 01:18:57 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c56", 0x10}], 0x1) socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x661febad, 0x2) 01:18:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:18:57 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000100)=""/80) 01:18:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:18:58 executing program 3: socket(0x40000000015, 0x805, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x49) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000480), 0x8) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000040)) unshare(0x40000000) fchmodat(r1, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000004c0)="9080eb59f5035b445a53e377f945b4595efa6d77db73b768455c25772ff93eb944eb130b1d5b5db569664bcb0eb61da08d5bb8851e964f68e57549b5399541da8b091ee579e4bc8ef66a2852a6dfb9a9537e88c4e892b67349ddf54eab4d8304d1bf7e575778ee9fe63717faa0512b1a997a1d814b836e2c39f35dcec0d87f4f13d08b0a930c7f15be64d4610004143d90ac0e754bebe5625382f83a87bd11d5cbb3080601db8098b2380a605621fd40ba272c3dd628199480ed328edeb6c57f8e20b8c45a4af493ccb497bf9e98c7f6e925b29af16728c879c81684fea8102cc6a0b1fd596701928cc7eb7793414e1f89d362d79549535c63f38185d8579a6001b4a8ab9539ac30f2791ce0765a19ae71fccb3a97f590d7f46df1421f8be479893fdd8477decd9867a03f7a53698aecaf9fb8bb0723107116fde90dd79d3d0cef19f20eea130619b5cd6ac0ee35729a7846bbd903924fda32cb72d41a8f6f7570359516cfeedb680fd8be53ae0a896fd856e192fb3ecdafec76f2788a7cf7cd51af1ed4f8be5c7a68aaaf2f2a635819c08ae6898866af55a8acfe27e2d617808b5c652c3dd6bb5c3079b0898ec40a57c5fed7ec765ed36a9889d2dd9f1b011c80a503e2bc95e09a1985aad4d57e6076989f03df1d04b44e4f70290c50148d09fc7d01e177c01adb5fee6d883e6c1583013f4b355b6527e3725f61842d9a6be0e2f35de6e019f75f22475d274e733571aed982d8288b162964c5a5219ba347bfebce24de4ad54df3038928a5498e1428f92025cf9242077385c9de445c5e4b186bf2f4756309fc183bd114c1a05484a4d8dd155958d09b1666bd5c6777a333021b64a0b0dd5ed6a92d16436b19cee8ce6fddad718a875621c43550ed4decc3cd5beb62ffed58f437163841012fa71c85280a343c6a482642f0b15fe8c46c3de423de6f606d45f4a6bfd1ffa4069b7f6afe13204dbff44a053926c75bd611c9dc1643562f6564fdb9a2b084722fca369a969d274f652ac1198e76546aad55ce734623aa97ec9d1972b223d1291165511eb50bf34ccc5d236e5d5729f5455042e03709454d10dcfeda1c7cc0b8a62adb26070e31330efaad774c55d53cde14f3c491669ddc231d1ee2defb8543ba629a31e59e681546739dc6bb1a0e264e59bbdbc9ab1d7f3794d4933a70407286aa7ed5ecceca8abfb7665f0cbd57ed183ab485588088ab9305018e90839dd2c29052a5fee79e38a66d36cb161f5963f7fe47720e4d6224505720bec104b0a357d7d9736c13a66922fdca0a340046199e6cb30c9e1a181f4f7162db105a724e1e3606b62bdeb873f3bc1f267231a519347610efa09329ef3b9b5c59def77a76666081a132f8d5516d3314e93095290eef2698884ab4721f0dc2a429c33ea57ece066f8efe2dad32fd9bf2c21eb14bb30028e5dc7a1a38302388b954e70ee0b7b950a807df0ef6bcabe3479764ee5a5fd3a7465bcb0af1edc8ee94c7fdf62aabbb3e8a8c639546bbe1d76b6e530808d657486c96aee67fe0d6604efcb529a24d9363dcbd1a15e079e55e7846f39cf56d0cf28b60c949b4aaa3b71689a669e5a6614eac635edb59b136a92f655435a439760a503d7423c5e90df4603a553fc5a2f20c274192341df56757cba587a0480c02a3f04465618909731e1605dc48c1e66d22118ce9b37471f0eb87c8996cc2e9f15239221acb8f96d2c9654d3db59dbee71c4580cd4d05b37691bd208f2ee5c7632a2ddc8c94f7c3aa616a2a21729658b60cacc1937ef1dd68340494db23276aea0cea926d6e8e1a77f142b1931d56514f7f93e4f09b68f8246d8ef27baf6ab7c9832dbf4b363d5c21a89de948e861892a0a42dcf9f25956188a07233e5161d7008ab2d0af0d2c3258fa4a1e922431193ca96621a1a1334c3dfaceac53de1fe89ed54313c66062f155e33994c3b3549b97e818936ffa7dc2a5512f62df7ba6c3ba54123ecafbb77ccf558c0d61d9785f9c103b35dcdd390b5caaba1c54646613fbaee7f0ecb0b354893beb0615c713cfb78078dc132feb48c1d97d22c33336da2122a8690c725e0777f17a184b373f847a43f83809b904350308957c6d961995bd2e8f53ce2f72550b964f7f2440d13d9e3c9d9af032fe19c0746c9f2b688b35c56a184adcab9e404fca1014ef4d7145a0f1c2157126e181d69718b4e339378ac8606f34771a8aa39380c76deaf525d0174b245fb72187ab8f3592ce7f71f751b0c3928c916c126719bcb4cb61e4d02fdd6f19b0fe5c4029ce4abc69d0ddd831422286e13cdad157d5f64fb6ba3496d93947dc2322bd1d0dd59c7a9d831d132842dd44e49e61e846b13a182c580926610144e076d310b699543ac3df1569b0d0a708a7ea1c5bbd106baba67045f6b1f977d86b0206cd2998b30282dea20b3520c142e14225c8da8fffd763248ca8d99728ce860645662495b0a657ce4df070b58ecb816c5bcea2112a6442eabc32380ba1e4702187eb24daacd63cd71f6d4cd4e08e8002fb793c7137d77948e8ec4ef958d6f601fe501d8e2cd693a981b1376398d914dde100bcb34b3ce4556a81f71ea70de13d827dce013551a1579bd0bc88fa4428b0f4aee4310dfa60b44016c9ae5d5c84250b834a7b9b1e518fee894ebb3bc802861e8d77b81b10fc5087262f28b1d506767ca4d2f6c563e9ca6524eb5f5c66062859601a3eb67386c286e5a73d3284ba3ed7f8b700d0b85d567eb9e127ecb415908400420f939e5955044782ec790e2a498b50a8fb0a3a57fa4f64df50cebbec326269be7f7cec964692f6a6cd08dad6513ca28b7fe02e3942a0326b93eb3b0c5002fde2f3ea3cb4b8a8c54f0cc6ca005e4a94dafebbe480974e224633ba88d45cd13b3fae1698dd529f333c0454596b9432e7c2fd4bb5f93c7b1ec7701b004003745d57947fa6efdfe0c035b2a790111d96e536c0bce0b951eb8316b54d3661af6cf5d2d99885d0c6976d0d5bc597de18e3f2c7a5a679998b1ccb4b8e1875a661d1a9c39945ac3240dd60cfeeacfedd73ad000e4e4f33c4e089beb1f788210a7e90074866768cd0d4c08bf403aa80c6bd49e10ba974484106347e365700c4104caae95fd1bd8583bf3a4ee9be97056414edc42a105950082933dd79c40effef66235da77df259f0112ee53d1897abde0eef7f76941cf68a1963a51fe8aa4dbe74b224e93cb9f85b924bc6946dd8ccb2e060b996372eae1cca215896f7146eb41dba08a546a96255c68d001bbd0b258adb29fbd4f3b098777f5dd453fe47359b905c0c76c2d5aed985e555b5ef3ea107856998f3083bd6743cd05076c47e29fd6dec39f66025ffcb7584238fb899bd58e99a91cf7fb0d55cf033e441edea459ada922064ff7c1fc281786bc4a3650e77a5b1ee37f070d955b4f115c467c8c1dcbf746ab3598a33892e6181dd5805695e8cfb5e097eb717e46ca47d14ef48d231ba6c2e1219a4d5fd811cfd2c93b385ea1ccff564fbef0f147248880a2587998c83a1647c452056a08f5062052b9a14766c0bf6536ce1db2456361a44997e9dd3376e0abe2d07a3b911ff0ae3516d658b966c6925b9f4164fda4c2dee8021ed5c36e0a2c829d587032012a44510053fb8406d6203af80015ca42b6c51ea78f757ed44e87a50df47de097603a15bd81d86d833e78c56f10ff179b850e8a12b4bf10a824c8bdd45ef8f1d021f5d3c8e7f874802c638b245a5961a98ca5749406e1a2a24da3fe5178d27fc2370e8964756daccc1541eb0b4765c3e9f3fdbe0a4a612eb030983b7965fb8367427c86cf8dade73a4aa2b703a448574b278362b8f6619cb82cd38a20487de7bdab2d9d98627ea15ad34d3b8933d61194d678c45095ae6bbc5938eaaa7224ff2d31777b724640c3983afb2cb79e536294d01598e4ca4930774545ccaf9b2b0e4e12b1eef1a445b1d187ab3327648a9ed903561e3167eb13680cb3be33e78d6892836ec8585860149fb0ab2227addb136fd8b68540ff5a5dc9d15e0f50971128b8a6985e8955706476dbb7d96476a6042af95ec4ca8979138fc1c23454f4da23d404dbdc16ddd2b51c31983b98c61b9b076981772ab429c4250a70de2159a6c241ab488636ecb494425f8cdf07e8f0d84d0766e30cce2e636d93817f35f8efb4193552f1a82ab2c7b84f611be8e0a9b8887eaec4695f648cbac9b0a506f05ba09984131cfe8e74fb45c514ce9776178115f1ca0c31f20017c36113450d855bfd984120bf25480ff98aafd83fe83fdd64108977e4078002480a437093dff021498ab2a5a5ef8ab318e657ed213e2dd1e5562f51a66c14cffc84c2b93570773cac5ebbdc81569019a812be4c72af253eb1e12335b731e1209a2ae7850d3781b6d019903b703698662b1d2f181c1d12dc748a6ce030486698e75512be8843a007c604d92e75ab2342dfda222d6185c9e27ee6a2ecedeaeca140bf48c4359418f81cb54bba81db163830aa453578de3723f97906b9e005bc6b98d2da048ad375d98848872d2474d52bb1a1e658e08035007b4927cf65b6574b6afc80fd457ae1d289ea8e4277ac51d3e4a92e44e50f5051f52d4ef8b723d0312748f9c3764779f5d9b8248b2e719f9edc3d154c1e9c635935e1960f3af98666c03a12db5195d3b334a69d003771b5674c92bcfa743818577c611e155e9c51176b35b9e20d79bc058f9073bcea18dac61acfc1fe42795688d172d7802d26f50bc6015b98f6e4c4246bf358aea7fd82b4b8d526043c9b8af45ba02f29104a8fc8dd6052ebb7a748112a874c4be1d49e286a7f0055e5fcde3ee0c95af75fed8636aadc9de05159132274f2556b35364b0140f16a6aebd37f2c67f57bd10b812573f211f854960fef5fdc90016543457610e2649aa378f18989f471975bf7bdfdf8bb83742abdd55a58d48014f3d643991c679c84cc960b868ce9e37bf57d2bd625f8ef29fc663ea62293a065c53fa3d8747376d5c8cb6f385242e12f1787eca0030c6fbe8482177c27726b4497a755bc4e2f1f9b3ec4324f9c4ba355517996d63222164361f17493b8f0f0842b03ed114c5d205a888983813d1b815a8ffedc18f2997be3170bd7c5442112a386a56536fe8675d98b7126c22844e56b4cb6280fcacf0c55b9d43cbcc48f0e55c5189afd98af354d8419d5893d7759d8e2a806948aad2d3845d66d297a8d9c95ec4dfff73e595929008f7687c513a8280cad2656e52c287667a27d8a4f35f820ec0793e74081112a1461a8ec53ea398031ada9de6d66052322f719094f8edd901cf71af0cdd2eda0e5b077c7c94f876cf2eec2e4e9cba060ba50af03a34235adfdc0836416c04e2492caad529fabaa6a55daec1f71474d8b50ac3138c09aca0e438c6d1851b4e2b8af14b717f7609a2aaa5e0ea1173aa01cd0b9b614d986c9f5cd0dcb6acaeb406b386151d698e64ff93b4ee41e389546e3d0dff3795ae5400c89019e6af52fbec801a36f30fb35c721de803bcbf728a9512b2154e9f6ded1f5a2be6b9f4c5d7bf6d9f1fc9439359d13b46169b258de69175afdd5eb18cdfb06c2fb82dcbf4a7f2b8abf2cf60afd651cb30342fbcd3fa4e22ff553aaf3b86c56d00a2fdb1fca522cb2f32d71d5ff5521313", 0xf9b, 0x0, 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffc) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000200)={{0x4, 0x1, 0xffffffff7fffffff, 0x4, '\x00', 0x1}, 0x0, 0x6, 0xfffffffffffff801, 0x0, 0x2, 0x9, 'syz0\x00', &(0x7f0000000080)=['/dev/null\x00', 'security\xec}cpuset\x00'], 0x1b, [], [0x0, 0x32, 0x4, 0x8000]}) 01:18:58 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) r3 = syz_open_dev$mice(0x0, 0x0, 0x418040) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mremap(&(0x7f000001b000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000022000/0x4000)=nil) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000380)='id_resolver\x00', &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0xfffffffffffffffc) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000080)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000500)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800e00000000000000000000000000000000000000000000000000048004354000000000000000000000000000000000000000000000000000000000000080004000000010000006e657462696f732d6e7300000000000000000000800000000000000000000000ffffffff000000000000000076657468315f746f5f7465616d00000076657468315f746f5f7465616d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000002e00016800000000000000000000000000009800c00000000000000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020200050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00"], 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x20000, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 309.186265] IPVS: ftp: loaded support on port[0] = 21 01:18:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 309.405542] IPVS: ftp: loaded support on port[0] = 21 01:18:58 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000040)={0x0, 0x2000}) r3 = epoll_create1(0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x0) close(r2) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000140)={0x5}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000100)) write(r1, &(0x7f0000000340), 0x10000014c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x43d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x7, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={0x0}) 01:18:58 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) r3 = syz_open_dev$mice(0x0, 0x0, 0x418040) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mremap(&(0x7f000001b000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000022000/0x4000)=nil) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000380)='id_resolver\x00', &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0xfffffffffffffffc) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000080)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000500)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800e00000000000000000000000000000000000000000000000000048004354000000000000000000000000000000000000000000000000000000000000080004000000010000006e657462696f732d6e7300000000000000000000800000000000000000000000ffffffff000000000000000076657468315f746f5f7465616d00000076657468315f746f5f7465616d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000002e00016800000000000000000000000000009800c00000000000000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020200050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00"], 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x20000, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 01:18:58 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x661febad, 0x2) 01:18:58 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x2) socketpair$unix(0x1, 0x2000000000002, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x20323}) 01:18:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000440)=""/4096, 0x1000) 01:18:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 309.962721] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 309.970648] __nla_parse: 7 callbacks suppressed [ 309.970667] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 309.989577] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 310.049556] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 310.059712] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:59 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) r3 = syz_open_dev$mice(0x0, 0x0, 0x418040) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mremap(&(0x7f000001b000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000022000/0x4000)=nil) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000380)='id_resolver\x00', &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0xfffffffffffffffc) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000080)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000500)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800e00000000000000000000000000000000000000000000000000048004354000000000000000000000000000000000000000000000000000000000000080004000000010000006e657462696f732d6e7300000000000000000000800000000000000000000000ffffffff000000000000000076657468315f746f5f7465616d00000076657468315f746f5f7465616d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000002e00016800000000000000000000000000009800c00000000000000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020200050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00"], 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x20000, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 01:18:59 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:59 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:18:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x3f) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) accept4(r1, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f00000000c0)=0x80, 0x800) 01:18:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x6850, 0x10040) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0x0, r0, 0x1}) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = socket$inet(0x10, 0x2, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80001, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x1000) dup(r1) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:18:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000140a43ba5d806055b6fdd80b40000000140001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) [ 310.493909] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 310.503590] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:59 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000040)={0x0, 0x2000}) r3 = epoll_create1(0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x0) close(r2) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000140)={0x5}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000100)) write(r1, &(0x7f0000000340), 0x10000014c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x43d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x7, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={0x0}) [ 310.624938] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:18:59 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x661febad, 0x2) 01:18:59 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) close(r2) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000140)={0x5}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x43d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x7, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:59 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:19:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000000)={0x0, @aes256}) [ 311.050124] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 311.084709] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:19:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac11850f923311615fcce95cf0400b5eba0b4d65cdbaa98cb930007fff080000000000000", 0x2e}], 0x1}, 0x0) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 01:19:00 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) r3 = syz_open_dev$mice(0x0, 0x0, 0x418040) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mremap(&(0x7f000001b000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000022000/0x4000)=nil) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000380)='id_resolver\x00', &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0xfffffffffffffffc) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000080)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000500)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800e00000000000000000000000000000000000000000000000000048004354000000000000000000000000000000000000000000000000000000000000080004000000010000006e657462696f732d6e7300000000000000000000800000000000000000000000ffffffff000000000000000076657468315f746f5f7465616d00000076657468315f746f5f7465616d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000002e00016800000000000000000000000000009800c00000000000000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020200050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00"], 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x20000, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 311.269165] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'. 01:19:00 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 311.326458] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 311.400719] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'. [ 311.443460] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:19:00 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000040)={0x0, 0x2000}) r3 = epoll_create1(0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x0) close(r2) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000140)={0x5}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000100)) write(r1, &(0x7f0000000340), 0x10000014c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x43d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200), &(0x7f0000000300)={0x0}) getsockopt$inet6_dccp_buf(r1, 0x21, 0xcd, &(0x7f0000000180)=""/111, &(0x7f0000000280)=0x6f) 01:19:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x80000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000080)) ioctl(r0, 0x101000008912, &(0x7f0000000000)="0adc1f123c123f31884eee4e8b3b1e4d6194ea9149c591b070970dead821c60a605ed72eb5faac0b25dc8a276e") socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x385, &(0x7f0000000340), 0x0, 0x0, 0xfffffddc}, 0x802) 01:19:00 executing program 4: 01:19:00 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:19:00 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x661febad, 0x2) 01:19:01 executing program 4: 01:19:01 executing program 3: 01:19:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x4000000) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0xffffffffffffffe4}], 0x1}, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) [ 312.284208] QAT: Invalid ioctl 01:19:01 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2000000088) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x7, 0x4) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0x9, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x10) recvmmsg(r0, &(0x7f0000000180), 0x400000000000370, 0x6, &(0x7f0000000100)={0x77359400}) 01:19:01 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:19:01 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0x1fffffff0007fffc) 01:19:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x9, 0xc) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000040)='y\x00', 0x2, 0x0) 01:19:01 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000040)={0x0, 0x2000}) r3 = epoll_create1(0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x0) close(r2) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000140)={0x5}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000100)) write(r1, &(0x7f0000000340), 0x10000014c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200), &(0x7f0000000300)={0x0}) getsockopt$inet6_dccp_buf(r1, 0x21, 0xcd, &(0x7f0000000180)=""/111, &(0x7f0000000280)=0x6f) 01:19:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000002200010000000000000100000400000048001100e2abb4ec7645192056d52f8d136f699d897bdabf4fd3c08e579e5253c2081c92cacb9693e7bb692f4ba15133ce6266b2a62bbacd9d21aa000000"], 0x1}}, 0x0) 01:19:01 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:19:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x6, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x4000000) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000140)=0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f00000000c0)={{}, 0x1, 0x3ff, 0x401, {0xff, 0x80}, 0x1, 0x47}) 01:19:01 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c56", 0x10}], 0x1) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x661febad, 0x2) 01:19:01 executing program 3: 01:19:02 executing program 4: 01:19:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:19:02 executing program 3: 01:19:02 executing program 4: 01:19:02 executing program 1: r0 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x2, 0x2) r1 = accept$packet(r0, 0x0, &(0x7f0000000040)=0xfffffea2) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000002c0)={r2, 0x1, 0x6, @dev={[], 0x26}}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r4 = socket$inet(0x10, 0x2, 0x0) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x6) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0x7}, 0x2) sendmsg(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:19:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 313.289814] validate_nla: 5 callbacks suppressed [ 313.289836] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 313.350656] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 01:19:02 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000040)={0x0, 0x2000}) r3 = epoll_create1(0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x0) close(r2) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000140)={0x5}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000100)) write(r1, &(0x7f0000000340), 0x10000014c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200), &(0x7f0000000300)={0x0}) getsockopt$inet6_dccp_buf(r1, 0x21, 0xcd, &(0x7f0000000180)=""/111, &(0x7f0000000280)=0x6f) 01:19:02 executing program 4: 01:19:02 executing program 3: 01:19:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'rose0\x00'}, 0x18) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) clock_nanosleep(0x7, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100)) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000040), 0x4) [ 313.653555] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 313.719416] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 01:19:02 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c56", 0x10}], 0x1) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x661febad, 0x2) 01:19:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:19:02 executing program 4: 01:19:02 executing program 3: 01:19:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x3) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:19:03 executing program 4: 01:19:03 executing program 3: 01:19:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:19:03 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000040)={0x0, 0x2000}) r3 = epoll_create1(0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x0) close(r2) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000140)={0x5}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000100)) write(r1, &(0x7f0000000340), 0x10000014c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200), &(0x7f0000000300)={0x0}) getsockopt$inet6_dccp_buf(r1, 0x21, 0xcd, &(0x7f0000000180)=""/111, &(0x7f0000000280)=0x6f) 01:19:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x10102, 0x0) r1 = memfd_create(&(0x7f0000000140)='posix_acl_access\x00', 0x7) finit_module(r1, &(0x7f0000000180)='IDLETIMER\x00', 0x2) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x180, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f00000000c0)=0x1e) 01:19:03 executing program 4: 01:19:03 executing program 3: [ 314.605213] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 314.675849] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 01:19:03 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c56", 0x10}], 0x1) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x661febad, 0x2) 01:19:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:19:03 executing program 4: 01:19:03 executing program 3: 01:19:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) inotify_init1(0x800) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000bfe000/0x400000)=nil, 0x400000}, 0x2}) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 314.883997] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 01:19:04 executing program 3: [ 314.951795] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 01:19:04 executing program 4: 01:19:04 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:19:04 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000040)={0x0, 0x2000}) r3 = epoll_create1(0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x0) close(r2) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000140)={0x5}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000100)) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x43d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200), &(0x7f0000000300)={0x0}) getsockopt$inet6_dccp_buf(r1, 0x21, 0xcd, &(0x7f0000000180)=""/111, &(0x7f0000000280)=0x6f) 01:19:04 executing program 1: getgroups(0x0, &(0x7f0000000000)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000040)) r2 = semget(0x1, 0x3, 0x40) write$P9_RXATTRCREATE(r1, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) semctl$GETZCNT(r2, 0x2, 0xf, &(0x7f0000000440)=""/4096) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f31a4ce155ca1ac7488b070") r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:19:04 executing program 3: 01:19:04 executing program 4: [ 315.524593] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 315.533629] __nla_parse: 8 callbacks suppressed [ 315.533650] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:19:04 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c56", 0x10}], 0x1) close(r0) socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x661febad, 0x2) 01:19:04 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:19:04 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000240)="0adc1f123c12a41d88b070") 01:19:04 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(r1, &(0x7f00000004c0)={&(0x7f00000001c0)=@nl=@unspec, 0x80, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8907, 0x0) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 01:19:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x5cd, 0x80) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$DRM_IOCTL_GET_UNIQUE(r3, 0xc0106401, &(0x7f0000000000)={0x9e, &(0x7f00000000c0)=""/158}) [ 315.840906] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 315.849919] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:19:05 executing program 3: add_key(0x0, &(0x7f0000000340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xfffffffffffffd1c, &(0x7f0000000280)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='io\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) write$nbd(r0, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x4, 0x4, "75daeb1f6b345cd8aa8cc043a6ab9ede880625965b77e353b0c2127096239fa945dd1c82e5be2bf027afe225e975d4b61d132a9f2c94a570cc708a58e94f2bc90ba9e38611a7d34ca4846cf1e5871be3169e541a1c440a0e704dbc97f924ada110cdb1bbd794ae80d349d386df960e5e96"}, 0x81) fchmodat(r0, &(0x7f0000000240)='./file0\x00', 0x69) [ 315.948762] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:19:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0xffffffffffffffff, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:19:05 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:19:05 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000040)={0x0, 0x2000}) r3 = epoll_create1(0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x0) close(r2) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000140)={0x5}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x43d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200), &(0x7f0000000300)={0x0}) getsockopt$inet6_dccp_buf(r1, 0x21, 0xcd, &(0x7f0000000180)=""/111, &(0x7f0000000280)=0x6f) 01:19:05 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c56", 0x10}], 0x1) close(r0) socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x661febad, 0x2) 01:19:05 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000080)='wlan1{\x00', 0x6) lseek(r0, 0x0, 0x3) 01:19:05 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:19:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bc070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) geteuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000480)) getuid() lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) lsetxattr$system_posix_acl(0x0, &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f0000000900)={{}, {}, [{}, {}, {}, {}], {}, [], {0x10, 0x6}, {0x20, 0x1}}, 0x44, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) preadv(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/86, 0x56}, {0x0}], 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) 01:19:05 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 316.454064] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:19:05 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c56", 0x10}], 0x1) close(r0) socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x661febad, 0x2) [ 316.516888] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 316.548890] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 316.556140] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 01:19:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8, 0x20000) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:19:05 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 316.652239] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 01:19:05 executing program 4: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6056, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000}, {{@in6, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x19}, 0x0, 0x0, 0x0, 0x10006}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0) 01:19:05 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000040)={0x0, 0x2000}) r3 = epoll_create1(0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x0) close(r2) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000140)={0x5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x43d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200), &(0x7f0000000300)={0x0}) getsockopt$inet6_dccp_buf(r1, 0x21, 0xcd, &(0x7f0000000180)=""/111, &(0x7f0000000280)=0x6f) 01:19:05 executing program 5: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c56", 0x10}], 0x1) close(r0) socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x661febad, 0x2) [ 316.849861] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 316.906057] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:19:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:19:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x0, 0x8001) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:19:06 executing program 5: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c56", 0x10}], 0x1) close(r0) socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x661febad, 0x2) 01:19:06 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000040)={0x0, 0x2000}) r3 = epoll_create1(0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x0) close(r2) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000c85000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x43d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200), &(0x7f0000000300)={0x0}) getsockopt$inet6_dccp_buf(r1, 0x21, 0xcd, &(0x7f0000000180)=""/111, &(0x7f0000000280)=0x6f) [ 317.279892] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 317.341725] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 01:19:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x101000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f00000000c0)={0x6, 0x9, 0x800, 0x0, 0x0, [], [], [], 0xff}) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:19:06 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x13102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000008, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x11) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x37}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x21, r0, 0x0, 0x0) 01:19:06 executing program 3: syz_open_dev$dri(0x0, 0x6, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() sched_setaffinity(r0, 0x63, &(0x7f0000000000)=0x9) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='mounts\x00') ioctl$FITRIM(r1, 0xc0185879, 0x0) preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') r2 = getuid() lchown(0x0, r2, 0x0) socket$bt_rfcomm(0x1f, 0x0, 0x3) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=0x0) r4 = shmget(0x3, 0x1000, 0x41, &(0x7f0000ffd000/0x1000)=nil) shmat(r4, &(0x7f0000ff0000/0x10000)=nil, 0x1000) sched_getparam(r3, &(0x7f00000000c0)) 01:19:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:19:06 executing program 5: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c56", 0x10}], 0x1) close(r0) socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x661febad, 0x2) 01:19:06 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000040)={0x0, 0x2000}) r3 = epoll_create1(0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x0) close(r2) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000c85000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x43d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200), &(0x7f0000000300)={0x0}) getsockopt$inet6_dccp_buf(r1, 0x21, 0xcd, &(0x7f0000000180)=""/111, &(0x7f0000000280)=0x6f) [ 317.612617] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 317.635007] ptrace attach of "/root/syz-executor.4"[13803] was attempted by "/root/syz-executor.4"[13804] 01:19:06 executing program 4: prctl$PR_SET_TIMERSLACK(0x1d, 0xfffffffffffffffe) clock_nanosleep(0x7, 0x0, &(0x7f0000000100), 0x0) 01:19:06 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c56", 0x10}], 0x1) close(r2) socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x661febad, 0x2) 01:19:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") socket$inet(0x10, 0x800, 0x20) r1 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000100), 0x4) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x8) 01:19:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:19:06 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000040)={0x0, 0x2000}) r3 = epoll_create1(0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x0) close(r2) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000c85000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x43d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200), &(0x7f0000000300)={0x0}) getsockopt$inet6_dccp_buf(r1, 0x21, 0xcd, &(0x7f0000000180)=""/111, &(0x7f0000000280)=0x6f) 01:19:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/11, 0xb9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) clone(0x200107, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1) shutdown(r2, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000040)) 01:19:07 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000080)='wlan1{\x00', 0x6) lseek(r0, 0x0, 0x0) 01:19:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:19:07 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:19:07 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000040)={0x0, 0x2000}) r3 = epoll_create1(0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x0) close(r2) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000140)={0x5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x43d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200), &(0x7f0000000300)={0x0}) getsockopt$inet6_dccp_buf(r1, 0x21, 0xcd, &(0x7f0000000180)=""/111, &(0x7f0000000280)=0x6f) 01:19:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="360f20990f20c06635000001000f22c00f20c06635100000000f22c0dfac0b000fc7280f01c90f01d50f01667966b90b0200000f3266b94c0300000f32", 0x3d}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f00000000c0)=@v1={0x1000000, [{0x9}]}, 0xc, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x8, 0x2, 0x9, 0x3c4a, 0x3f}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 318.288473] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:19:07 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000040)={0x0, 0x2000}) r3 = epoll_create1(0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x0) close(r2) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000140)={0x5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x43d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200), &(0x7f0000000300)={0x0}) getsockopt$inet6_dccp_buf(r1, 0x21, 0xcd, &(0x7f0000000180)=""/111, &(0x7f0000000280)=0x6f) 01:19:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) [ 318.677291] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 01:19:07 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c56", 0x10}], 0x1) close(r2) socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x661febad, 0x2) 01:19:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000440)="9c96c94200589d37645f9523589ab726643ac4254392e0f519c9717e515d4521ccf004d2bf4c8abb5d15884597d95b59") r1 = socket$inet(0x10, 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udplite\x00') execveat(r2, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=[&(0x7f00000000c0)='\x00', &(0x7f0000000100)='[vmnet1]user{proc\x00', &(0x7f0000000140)='!\x00', &(0x7f0000000180)='--ppp0wlan1\x00', &(0x7f00000001c0)='!.cgroup-ppp0,\x00', &(0x7f0000000200)='\xcb*vmnet1eth0]:\xa4]wlan1/[proc*vboxnet1trusted\'cpuset}lo\x00'], &(0x7f00000002c0)=[&(0x7f0000000280)='em1\x00'], 0x1000) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:19:07 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:19:07 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x40000000000029f, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 318.847514] validate_nla: 7 callbacks suppressed [ 318.847533] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 318.860308] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:19:08 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000040)={0x0, 0x2000}) r3 = epoll_create1(0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x0) close(r2) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000140)={0x5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x43d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200), &(0x7f0000000300)={0x0}) getsockopt$inet6_dccp_buf(r1, 0x21, 0xcd, &(0x7f0000000180)=""/111, &(0x7f0000000280)=0x6f) 01:19:08 executing program 4: r0 = epoll_create1(0x0) unshare(0x400) fadvise64(r0, 0x0, 0x0, 0x7) 01:19:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:19:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) 01:19:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup2(r0, r0) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x40000000000040, 0x40) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x1f, 0x80) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x18) r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:19:08 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000040)={0x0, 0x2000}) r3 = epoll_create1(0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x0) close(r2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000140)={0x5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x43d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200), &(0x7f0000000300)={0x0}) getsockopt$inet6_dccp_buf(r1, 0x21, 0xcd, &(0x7f0000000180)=""/111, &(0x7f0000000280)=0x6f) 01:19:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 319.366993] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 01:19:08 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ptype\x00') read(r0, 0x0, 0x0) [ 319.441435] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 01:19:08 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c56", 0x10}], 0x1) close(r2) socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x661febad, 0x2) 01:19:08 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000040)={0x0, 0x2000}) r3 = epoll_create1(0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x0) close(r2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000140)={0x5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x43d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200), &(0x7f0000000300)={0x0}) getsockopt$inet6_dccp_buf(r1, 0x21, 0xcd, &(0x7f0000000180)=""/111, &(0x7f0000000280)=0x6f) 01:19:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7ff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@loopback, @in6=@initdev}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000040)=0xe8) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x5) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 319.852207] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 319.883978] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 01:19:09 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x8, 0x3d, 0x8000000001}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f00000000c0), 0x0}, 0x18) 01:19:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:19:09 executing program 4: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./file1\x00', 0xfffffffffffffffc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r1, r2) execve(&(0x7f00000001c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r0) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={0x0}}, 0x0) 01:19:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:19:09 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000040)={0x0, 0x2000}) r3 = epoll_create1(0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x0) close(r2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000140)={0x5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x43d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200), &(0x7f0000000300)={0x0}) getsockopt$inet6_dccp_buf(r1, 0x21, 0xcd, &(0x7f0000000180)=""/111, &(0x7f0000000280)=0x6f) [ 320.154934] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 320.207945] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 01:19:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f21"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:19:09 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000040)={0x0, 0x2000}) r3 = epoll_create1(0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000140)={0x5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x43d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200), &(0x7f0000000300)={0x0}) getsockopt$inet6_dccp_buf(r1, 0x21, 0xcd, &(0x7f0000000180)=""/111, &(0x7f0000000280)=0x6f) 01:19:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x47, 0xfffffffffffffffc) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f0000000020080008001d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)='lo-wlan1cgroupvmnet0!em1keyring\x00', 0xffffffffffffffff}, 0x30) waitid(0x3, r2, &(0x7f0000000100), 0x1000000, &(0x7f0000000180)) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x2}, 0xc) 01:19:09 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x8, 0x3d, 0x8000000001}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f00000000c0), 0x0}, 0x18) [ 320.527873] ================================================================== [ 320.535350] BUG: KMSAN: uninit-value in __se_sys_waitid+0x32c/0xb30 [ 320.541808] CPU: 1 PID: 13952 Comm: syz-executor.1 Not tainted 5.0.0+ #11 [ 320.548939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 320.558421] Call Trace: [ 320.561056] dump_stack+0x173/0x1d0 [ 320.564996] kmsan_report+0x12e/0x2a0 [ 320.568844] kmsan_internal_check_memory+0x9f4/0xb10 [ 320.574002] kmsan_check_memory+0xd/0x10 [ 320.578113] __se_sys_waitid+0x32c/0xb30 [ 320.582231] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 320.587717] ? prepare_exit_to_usermode+0x114/0x420 [ 320.592767] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 320.598855] ? syscall_return_slowpath+0xb2/0x650 [ 320.603753] __x64_sys_waitid+0x62/0x80 [ 320.607766] do_syscall_64+0xbc/0xf0 [ 320.611825] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 320.617051] RIP: 0033:0x457f29 [ 320.620289] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 320.639217] RSP: 002b:00007fcb72808c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f7 [ 320.646971] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457f29 [ 320.654272] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000003 [ 320.661646] RBP: 000000000073bf00 R08: 0000000020000180 R09: 0000000000000000 [ 320.668946] R10: 0000000001000000 R11: 0000000000000246 R12: 00007fcb728096d4 [ 320.676247] R13: 00000000004c6d82 R14: 00000000004dc5d0 R15: 00000000ffffffff [ 320.683552] [ 320.685199] Local variable description: ----__pu_val120.i@__se_sys_waitid [ 320.692147] Variable was created at: [ 320.695903] __se_sys_waitid+0x18c/0xb30 [ 320.700020] __x64_sys_waitid+0x62/0x80 [ 320.704025] [ 320.706029] Bytes 0-3 of 4 are uninitialized [ 320.710464] Memory access of size 4 starts at ffff88802c2cfe78 [ 320.716443] ================================================================== [ 320.723803] Disabling lock debugging due to kernel taint [ 320.729366] Kernel panic - not syncing: panic_on_warn set ... [ 320.735261] CPU: 1 PID: 13952 Comm: syz-executor.1 Tainted: G B 5.0.0+ #11 [ 320.743655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 320.753282] Call Trace: [ 320.755912] dump_stack+0x173/0x1d0 [ 320.759550] panic+0x3d1/0xb01 [ 320.763273] kmsan_report+0x293/0x2a0 [ 320.767084] kmsan_internal_check_memory+0x9f4/0xb10 [ 320.772395] kmsan_check_memory+0xd/0x10 [ 320.776462] __se_sys_waitid+0x32c/0xb30 [ 320.780661] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 320.786113] ? prepare_exit_to_usermode+0x114/0x420 [ 320.791501] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 320.797159] ? syscall_return_slowpath+0xb2/0x650 [ 320.802118] __x64_sys_waitid+0x62/0x80 [ 320.806098] do_syscall_64+0xbc/0xf0 [ 320.809838] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 320.815031] RIP: 0033:0x457f29 [ 320.818241] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 320.837145] RSP: 002b:00007fcb72808c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f7 [ 320.845400] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457f29 [ 320.852667] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000003 [ 320.860200] RBP: 000000000073bf00 R08: 0000000020000180 R09: 0000000000000000 [ 320.867672] R10: 0000000001000000 R11: 0000000000000246 R12: 00007fcb728096d4 [ 320.875256] R13: 00000000004c6d82 R14: 00000000004dc5d0 R15: 00000000ffffffff [ 320.884839] Kernel Offset: disabled [ 320.888910] Rebooting in 86400 seconds..