51c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) 21:04:52 executing program 0: r0 = syz_open_dev$video(0x0, 0x7, 0x80000) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) 21:04:52 executing program 0: r0 = syz_open_dev$video(0x0, 0x7, 0x80000) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) 21:04:53 executing program 0: r0 = syz_open_dev$video(0x0, 0x7, 0x80000) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) 21:04:53 executing program 1: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x3) sendmsg$sock(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000009c0)="9a17", 0x2}], 0x2, 0x0, 0x25}, 0x4004045) splice(r1, 0x0, r0, 0x0, 0x60000, 0x0) 21:04:53 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x80000) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) 21:04:53 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x80000) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) 21:04:53 executing program 1: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x3) sendmsg$sock(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000009c0)="9a17", 0x2}], 0x2, 0x0, 0x25}, 0x4004045) splice(r1, 0x0, r0, 0x0, 0x60000, 0x0) 21:04:53 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x80000) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) 21:04:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002500)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', r1}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002540)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 21:04:54 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) [ 335.043876][T11671] 8021q: adding VLAN 0 to HW filter on device bond1 [ 335.054469][T11671] team0: Port device bond1 added 21:04:54 executing program 1: clone(0x200200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRESHEX], &(0x7f0000000040)=""/210, 0x12, 0xd2, 0x8}, 0x20) 21:04:54 executing program 0: syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) [ 335.404516][T11682] BPF:btf_header not found 21:04:54 executing program 0: syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) 21:04:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r2, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x12001}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', r7}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_FD={0x8}]}]}, 0x34}}, 0x0) 21:04:54 executing program 0: syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) [ 335.711045][T11692] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 335.735822][T11692] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:04:55 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, 0x0) 21:04:55 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, 0x0) [ 336.353000][T11694] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:04:55 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, 0x0) 21:04:55 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r2, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x12001}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', r7}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_FD={0x8}]}]}, 0x34}}, 0x0) [ 336.895433][T11728] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:04:56 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) [ 336.962866][T11728] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 337.003260][T11728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 21:04:56 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) 21:04:56 executing program 2: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x86c0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x20a200, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x0, 0x4) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0xbe11, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x80000}) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) write(r3, &(0x7f0000000100)="598213aa1d06f8d3bf31cbcb83131de2791212d14aafc4529d094b7c1de1d109b30e6922152bd685ace4064baf8d06ed3c5e26dd9b63cd684d41f9d77fb675944b6d", 0x42) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x10081, 0x0) ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f00000001c0)="515a9ea499b0aac693c743d50938573b9d8a03dace730f19d8f236c67f4d7457fc175654df537ad7cd8d64778eff669f83318de9fcd92f7b551ecb7eaa3ad3503c8a14ba60f16d4552e1baf464af5a7a8816f61ae2d6a10a0343ab8040e7aaf710e793f65676480b1db9bb767b25200bf54927b04376e437236a6e949d3997ce04771b8eb46c4445238b77cbc6ebd0caeaa1f376aedeb9254205adc99f5e2473517a798596ae06d4475c3f511b2932715cb3cadea4b06c2c23") r5 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xffffff88, 0x80002) sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, 0x0, 0xb, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_COMPAT_NAME={0x1e, 0x1, '+)^,^\x1f%\b#-vmnet1{%)ppp1\x91[\x00'}, @NFTA_COMPAT_NAME={0x6, 0x1, '*\x00'}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x19, 0x1, 'ppp0security,ppp0lo]\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40014) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcsu\x00', 0x101000, 0x0) ioctl$TCSETXW(r6, 0x5435, &(0x7f0000000440)={0x3, 0x1, [0x6, 0x1, 0x2, 0x8001, 0x8871], 0x7f}) pipe2(&(0x7f0000000480)={0xffffffffffffffff}, 0x800) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f00000004c0)={0x7, 0x2}) r8 = syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x8, 0x4000) ioctl$USBDEVFS_CLEAR_HALT(r8, 0x80045515, &(0x7f0000000540)={0xa, 0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000580)={r2, 0x0, r8}) ioctl$DRM_IOCTL_AUTH_MAGIC(r9, 0x40046411, &(0x7f00000005c0)=0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000740)={0x0, 0x0, 0x8}, 0x8) 21:04:56 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) [ 337.846606][T11728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.956590][T11728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 337.967214][T11728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 21:04:57 executing program 0 (fault-call:1 fault-nth:0): r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) 21:04:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r2, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x12001}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', r7}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_FD={0x8}]}]}, 0x34}}, 0x0) [ 338.424288][T11770] FAULT_INJECTION: forcing a failure. [ 338.424288][T11770] name failslab, interval 1, probability 0, space 0, times 1 [ 338.437681][T11770] CPU: 1 PID: 11770 Comm: syz-executor.0 Not tainted 5.6.0-rc6-syzkaller #0 [ 338.446421][T11770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 338.456527][T11770] Call Trace: [ 338.459901][T11770] dump_stack+0x1c9/0x220 [ 338.464329][T11770] should_fail+0x8b7/0x9e0 [ 338.468851][T11770] __should_failslab+0x1f6/0x290 [ 338.473888][T11770] should_failslab+0x29/0x70 [ 338.478552][T11770] __kmalloc_node+0x1b1/0x11f0 [ 338.483396][T11770] ? is_bpf_image_address+0x267/0x2b0 [ 338.488848][T11770] ? kvmalloc_node+0x19a/0x3c0 [ 338.493724][T11770] kvmalloc_node+0x19a/0x3c0 [ 338.498397][T11770] video_usercopy+0x28d/0x2b50 [ 338.503223][T11770] ? video_ioctl2+0xb0/0xb0 [ 338.507776][T11770] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 338.513890][T11770] ? stack_trace_save+0x123/0x1a0 [ 338.518964][T11770] ? kmsan_get_metadata+0x11d/0x180 [ 338.524209][T11770] ? kmsan_set_origin_checked+0x95/0xf0 [ 338.529807][T11770] ? kmsan_internal_poison_shadow+0x9f/0xd0 [ 338.535749][T11770] ? kmsan_internal_poison_shadow+0x66/0xd0 [ 338.541682][T11770] ? kmsan_slab_free+0x6e/0xb0 [ 338.546524][T11770] ? kmem_cache_free+0x33d/0x2cf0 [ 338.551589][T11770] ? putname+0x212/0x230 [ 338.555878][T11770] ? do_sys_openat2+0xd1b/0xd40 [ 338.560790][T11770] ? __ia32_compat_sys_open+0x293/0x2f0 [ 338.566393][T11770] ? do_fast_syscall_32+0x3c7/0x6e0 [ 338.571661][T11770] ? entry_SYSENTER_compat+0x68/0x77 [ 338.577012][T11770] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 338.582890][T11770] ? kmsan_get_metadata+0x4f/0x180 [ 338.588054][T11770] ? kmsan_get_metadata+0x11d/0x180 [ 338.593314][T11770] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 338.599171][T11770] video_ioctl2+0x9f/0xb0 [ 338.603550][T11770] ? video_usercopy+0x2b50/0x2b50 [ 338.608610][T11770] v4l2_ioctl+0x23f/0x270 [ 338.612991][T11770] ? v4l2_poll+0x400/0x400 [ 338.617455][T11770] do_video_ioctl+0x139f/0x10f80 [ 338.622489][T11770] ? kmsan_get_metadata+0x11d/0x180 [ 338.627736][T11770] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 338.633595][T11770] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 338.639715][T11770] ? do_vfs_ioctl+0x10cc/0x30c0 [ 338.644641][T11770] ? kmsan_get_metadata+0x11d/0x180 [ 338.649908][T11770] ? kmsan_get_metadata+0x11d/0x180 [ 338.655181][T11770] ? v4l2_poll+0x370/0x400 [ 338.659647][T11770] v4l2_compat_ioctl32+0x2b7/0x320 [ 338.664814][T11770] ? v4l2_fill_pixfmt+0x7e0/0x7e0 [ 338.669895][T11770] __se_compat_sys_ioctl+0x57c/0xed0 [ 338.675253][T11770] ? kmsan_get_metadata+0x4f/0x180 [ 338.680433][T11770] __ia32_compat_sys_ioctl+0xd9/0x110 [ 338.685863][T11770] ? compat_ptr_ioctl+0x150/0x150 [ 338.690951][T11770] do_fast_syscall_32+0x3c7/0x6e0 [ 338.696046][T11770] entry_SYSENTER_compat+0x68/0x77 [ 338.701199][T11770] RIP: 0023:0xf7ffcd99 [ 338.705333][T11770] Code: 90 e8 0b 00 00 00 f3 90 0f ae e8 eb f9 8d 74 26 00 89 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 338.724999][T11770] RSP: 002b:00000000f5df70cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 338.733457][T11770] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0cc5616 [ 338.741457][T11770] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 338.749470][T11770] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 338.757480][T11770] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 338.765494][T11770] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 338.869667][T11772] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 338.890306][T11772] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 339.062381][T11772] device hsr_slave_1 left promiscuous mode 21:04:58 executing program 0 (fault-call:1 fault-nth:1): r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) [ 339.499474][T11784] IPVS: ftp: loaded support on port[0] = 21 21:04:58 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r2, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x12001}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', r7}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_FD={0x8}]}]}, 0x34}}, 0x0) 21:04:59 executing program 0: syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) msync(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x140, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e4c7e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c44f91637a3c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddcaf4d0300000000000000138f9c2644e13071b939b38d7b213a5a62b4e72c7b32538a94cce6f4121b189c"}) [ 340.094084][T11798] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 340.195465][T11798] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:04:59 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x12001}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', r6}) 21:04:59 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000040)) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000000)={0x1000}) r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x5, 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7b, &(0x7f00000000c0)={r4}, 0x8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x5}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x12001}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', r5}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={r4, 0x2}, 0x8) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000100)={@any, 0x1}) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r6, 0x0) ioctl$DRM_IOCTL_RM_MAP(r6, 0x4018641b, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x4, 0x3, 0x1, &(0x7f0000ffd000/0x3000)=nil, 0x4}) [ 340.757017][T11784] chnl_net:caif_netlink_parms(): no params data found [ 340.952582][T11814] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 341.013590][T11814] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:05:00 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000040)={0x1, 0x0, 0x102, 0x0, {0x32, 0x7, 0x80, 0xffffff01}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r3, 0x0) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000000)={0x2, {0x7ffd, 0x1000078, 0x0, 0x6a}}) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) 21:05:00 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac87eea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b4dba81ef4ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d1f040000a033c3f2132e652626e13071b939b38d7b213a5a6200002c7b32538a94cce6f4121b189c"}) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000000)={0x3, "6341d294b8bf36d341fe3a46bfbf35fe84e4983672162f17734df2d69763a235", 0x10, 0x8001, 0x5, 0x8, 0x6}) 21:05:01 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x3, 0x0, [], {0x0, @bt={0x1, 0x1, 0x0, 0x0, 0x0, 0x1003ff, 0xcc54e207, 0x8, 0x6, 0x7, 0x100, 0xff, 0x2, 0x8, 0x1, 0x22, {0x5010, 0xffffff01}, 0x9}}}) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) [ 342.067759][T11784] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.075079][T11784] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.084544][T11784] device bridge_slave_0 entered promiscuous mode [ 342.190491][T11784] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.198047][T11784] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.207471][T11784] device bridge_slave_1 entered promiscuous mode [ 342.532505][T11784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.582695][T11784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.731609][T11784] team0: Port device team_slave_0 added [ 342.790667][T11784] team0: Port device team_slave_1 added [ 342.929465][T11784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.936684][T11784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.963235][T11784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.041025][T11784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.048724][T11784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.074825][T11784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.248964][T11784] device hsr_slave_0 entered promiscuous mode [ 343.276872][T11784] device hsr_slave_1 entered promiscuous mode [ 343.303815][T11784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.311441][T11784] Cannot create hsr debugfs directory [ 343.697235][T11784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 343.825250][T11784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 344.054648][T11784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 344.170732][T11784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 344.527835][T11784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.564899][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 344.573814][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 344.596316][T11784] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.624481][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 344.635354][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 344.644665][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.651990][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.692265][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 344.701401][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 344.711471][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 344.720829][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.728133][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.738793][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 344.778569][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 344.816799][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 344.827566][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 344.837994][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 344.848108][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 344.901047][T11784] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 344.912012][T11784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 344.931089][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 344.940810][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 344.950439][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 344.960976][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 344.970501][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 344.987349][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 345.043858][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 345.051592][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 345.092686][T11784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.160570][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 345.171079][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 345.234105][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 345.243833][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 345.269580][T11784] device veth0_vlan entered promiscuous mode [ 345.278754][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 345.288633][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 345.327280][T11784] device veth1_vlan entered promiscuous mode [ 345.409853][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 345.419647][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 345.429125][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 345.438946][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 345.461371][T11784] device veth0_macvtap entered promiscuous mode [ 345.483855][T11784] device veth1_macvtap entered promiscuous mode [ 345.541400][T11784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 345.552750][T11784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.564105][T11784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 345.574778][T11784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.588288][T11784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.596606][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 345.606078][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 345.615797][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 345.625623][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 345.648232][T11784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 345.659253][T11784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.672920][T11784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.683573][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 345.694053][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 21:05:05 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x3, 0x0, [], {0x0, @bt={0x1, 0x1, 0x0, 0x0, 0x0, 0x1003ff, 0xcc54e207, 0x8, 0x6, 0x7, 0x100, 0xff, 0x2, 0x8, 0x1, 0x22, {0x5010, 0xffffff01}, 0x9}}}) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) 21:05:05 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x5, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23051b98c85180000000077969c509dc8865c3aab1c18bba98f1776f5ddfa89ef7e3ec874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943097fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba0000544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000040)={0xbe7, 0x7fff, 0x28e0abee, 0x3, 0x3, "b385e3063539f4a6172542f842eb09957d922d"}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000000)={0x29, 0x1, 0x9}) 21:05:05 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x12001}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', r6}) [ 346.649503][T11892] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 346.688648][T11892] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:05:05 executing program 0: syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) 21:05:05 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x3, 0x0, [], {0x0, @bt={0x1, 0x1, 0x0, 0x0, 0x0, 0x1003ff, 0xcc54e207, 0x8, 0x6, 0x7, 0x100, 0xff, 0x2, 0x8, 0x1, 0x22, {0x5010, 0xffffff01}, 0x9}}}) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) 21:05:06 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x13, r1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) ioctl$SIOCRSSCAUSE(r2, 0x89e1, &(0x7f0000000080)=0x7fc) prctl$PR_GET_SECCOMP(0x15) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x2, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) 21:05:06 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x3, 0x0, [], {0x0, @bt={0x1, 0x1, 0x0, 0x0, 0x0, 0x1003ff, 0xcc54e207, 0x8, 0x6, 0x7, 0x100, 0xff, 0x2, 0x8, 0x1, 0x22, {0x5010, 0xffffff01}, 0x9}}}) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) 21:05:06 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x12001}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 347.640420][T11930] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:05:06 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x3, 0x0, [], {0x0, @bt={0x1, 0x1, 0x0, 0x0, 0x0, 0x1003ff, 0xcc54e207, 0x8, 0x6, 0x7, 0x100, 0xff, 0x2, 0x8, 0x1, 0x22, {0x5010, 0xffffff01}, 0x9}}}) [ 347.709306][T11930] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 347.772447][T11930] device veth0_macvtap left promiscuous mode 21:05:06 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x1, 0x7, 0x6, "4c769298e66770c43061994ed1e105b325ac2f36c3a65a2b318421fb592d94f2", 0x20363059}) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) 21:05:07 executing program 2: ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000000)={0x3, 0x0, [], {0x0, @bt={0x1, 0x1, 0x0, 0x0, 0x0, 0x1003ff, 0xcc54e207, 0x8, 0x6, 0x7, 0x100, 0xff, 0x2, 0x8, 0x1, 0x22, {0x5010, 0xffffff01}, 0x9}}}) 21:05:07 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x12001}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_team\x00'}]}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x12001}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000002b40)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002b00)={&(0x7f0000002580)={0x56c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x3f}}}]}}, {{0x8}, {0x258, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x49}}, {0x8}}}]}}, {{0x8}, {0x23c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x1000000}}}]}}]}, 0x56c}, 0x1, 0x0, 0x0, 0x2}, 0x91) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x7, @capture={0x1000, 0x0, {0x0, 0x7}, 0x1f, 0x17}}) 21:05:07 executing program 2: ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000000)={0x3, 0x0, [], {0x0, @bt={0x1, 0x1, 0x0, 0x0, 0x0, 0x1003ff, 0xcc54e207, 0x8, 0x6, 0x7, 0x100, 0xff, 0x2, 0x8, 0x1, 0x22, {0x5010, 0xffffff01}, 0x9}}}) [ 348.770293][T11930] device veth0_macvtap entered promiscuous mode 21:05:08 executing program 2: ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000000)={0x3, 0x0, [], {0x0, @bt={0x1, 0x1, 0x0, 0x0, 0x0, 0x1003ff, 0xcc54e207, 0x8, 0x6, 0x7, 0x100, 0xff, 0x2, 0x8, 0x1, 0x22, {0x5010, 0xffffff01}, 0x9}}}) 21:05:08 executing program 2: r0 = syz_open_dev$video(0x0, 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x3, 0x0, [], {0x0, @bt={0x1, 0x1, 0x0, 0x0, 0x0, 0x1003ff, 0xcc54e207, 0x8, 0x6, 0x7, 0x100, 0xff, 0x2, 0x8, 0x1, 0x22, {0x5010, 0xffffff01}, 0x9}}}) 21:05:09 executing program 2: r0 = syz_open_dev$video(0x0, 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x3, 0x0, [], {0x0, @bt={0x1, 0x1, 0x0, 0x0, 0x0, 0x1003ff, 0xcc54e207, 0x8, 0x6, 0x7, 0x100, 0xff, 0x2, 0x8, 0x1, 0x22, {0x5010, 0xffffff01}, 0x9}}}) [ 350.204062][T11949] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 350.415510][T11953] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 21:05:09 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x12001}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:05:09 executing program 2: r0 = syz_open_dev$video(0x0, 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x3, 0x0, [], {0x0, @bt={0x1, 0x1, 0x0, 0x0, 0x0, 0x1003ff, 0xcc54e207, 0x8, 0x6, 0x7, 0x100, 0xff, 0x2, 0x8, 0x1, 0x22, {0x5010, 0xffffff01}, 0x9}}}) [ 350.645876][T11980] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 350.967812][T12006] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 351.097134][T12009] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:05:10 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x3, 0x0, [], {0x0, @bt={0x1, 0x1, 0x0, 0x0, 0x0, 0x1003ff, 0xcc54e207, 0x8, 0x6, 0x7, 0x100, 0xff, 0x2, 0x8, 0x1, 0x22, {0x5010, 0xffffff01}, 0x9}}}) 21:05:10 executing program 0: syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r0, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x2, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be07000000000000000f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r3, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000080)={0x9, 0x0, [], {0x0, @reserved}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) connect(r1, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x4, 0x1, 0x1, {0xa, 0x4e24, 0xffff, @rand_addr="434d6490f84ee4753e7ad55220ef2f7b", 0x9}}}, 0x80) 21:05:10 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x141800, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x81204101, &(0x7f0000000040)) setsockopt$sock_void(r0, 0x1, 0x9, 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000180)) r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000240)={0x8, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) 21:05:10 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x3, 0x0, [], {0x0, @bt={0x1, 0x1, 0x0, 0x0, 0x0, 0x1003ff, 0xcc54e207, 0x8, 0x6, 0x7, 0x100, 0xff, 0x2, 0x8, 0x1, 0x22, {0x5010, 0xffffff01}, 0x9}}}) 21:05:11 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x54a80) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x3c12c0, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) 21:05:11 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x3, 0x0, [], {0x0, @bt={0x1, 0x1, 0x0, 0x0, 0x0, 0x1003ff, 0xcc54e207, 0x8, 0x6, 0x7, 0x100, 0xff, 0x2, 0x8, 0x1, 0x22, {0x5010, 0xffffff01}, 0x9}}}) 21:05:11 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000000)=0x62) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, r4, 0xc46dfc707e1df77d, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r4, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x90d3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x14}, 0x20000041) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x1000, 0x1, {0x8000, 0x7ff}, 0x6, 0x8b}}) 21:05:11 executing program 2: syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000000)={0x3, 0x0, [], {0x0, @bt={0x1, 0x1, 0x0, 0x0, 0x0, 0x1003ff, 0xcc54e207, 0x8, 0x6, 0x7, 0x100, 0xff, 0x2, 0x8, 0x1, 0x22, {0x5010, 0xffffff01}, 0x9}}}) 21:05:12 executing program 2: syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000000)={0x3, 0x0, [], {0x0, @bt={0x1, 0x1, 0x0, 0x0, 0x0, 0x1003ff, 0xcc54e207, 0x8, 0x6, 0x7, 0x100, 0xff, 0x2, 0x8, 0x1, 0x22, {0x5010, 0xffffff01}, 0x9}}}) 21:05:12 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="98a25a00c9d81b6c0ed98c8b8e1b2238", 0x10) r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) 21:05:12 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x12001}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:05:13 executing program 2: syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000000)={0x3, 0x0, [], {0x0, @bt={0x1, 0x1, 0x0, 0x0, 0x0, 0x1003ff, 0xcc54e207, 0x8, 0x6, 0x7, 0x100, 0xff, 0x2, 0x8, 0x1, 0x22, {0x5010, 0xffffff01}, 0x9}}}) 21:05:13 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$RTC_PLL_GET(r1, 0x801c7011, &(0x7f0000000000)) [ 354.279785][T12088] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 354.387796][T12088] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:05:13 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, 0x0) 21:05:13 executing program 0: clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) select(0x40, &(0x7f0000000040)={0x4, 0x80, 0x1, 0x7fff, 0x2, 0x0, 0x3, 0x20}, &(0x7f0000000080)={0x4, 0xbb, 0x4, 0x8, 0x5, 0xfffffffeffffffff, 0x5, 0x20}, &(0x7f00000000c0)={0xfffffffffffffffa, 0x6b, 0x2, 0x5, 0xfff, 0x4, 0x2, 0x6}, &(0x7f0000000140)={r0, r1/1000+30000}) r2 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r4, 0xc0845658, &(0x7f0000000340)={0x0, @bt={0x7e, 0x200, 0x0, 0x1, 0x7, 0x40, 0x8, 0x1c0000, 0x5, 0xfffffff8, 0xff, 0x5, 0x0, 0x48, 0x8, 0x4, {0x0, 0x10000}, 0x0, 0x6}}) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) 21:05:14 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, 0x0) 21:05:14 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:05:14 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x12001}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:05:14 executing program 0: syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=[&(0x7f0000000040)='/dev/video#\x00'], &(0x7f00000003c0)=[&(0x7f00000000c0)='/dev/video#\x00', &(0x7f0000000100)='/dev/video#\x00', &(0x7f0000000140)='bdevwlan0\x00', &(0x7f0000000180)='system{\x00', &(0x7f00000001c0)='/dev/video#\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00']) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/create\x00', 0x2, 0x0) [ 355.607156][T12130] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:05:14 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, 0x0) [ 355.758917][T12132] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:05:15 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) r2 = accept4$netrom(r1, &(0x7f0000000140)={{0x3, @netrom}, [@rose, @null, @remote, @null, @remote, @default, @bcast, @null]}, &(0x7f0000000040)=0x48, 0x80000) flock(r2, 0x5) 21:05:15 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:05:15 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @bt={0x1, 0x1, 0x0, 0x0, 0x0, 0x1003ff, 0xcc54e207, 0x8, 0x6, 0x7, 0x100, 0xff, 0x2, 0x8, 0x1, 0x22, {0x5010, 0xffffff01}, 0x9}}}) [ 356.479929][T12144] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:05:15 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x4c8081) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000040)={0x9, {0x0, 0x3, 0xfa4, 0x1}}) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0xa, @output={0x1000, 0x0, {0x4, 0x9}, 0x3, 0x6}}) 21:05:15 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @bt={0x0, 0x1, 0x0, 0x0, 0x0, 0x1003ff, 0xcc54e207, 0x8, 0x6, 0x7, 0x100, 0xff, 0x2, 0x8, 0x1, 0x22, {0x5010, 0xffffff01}, 0x9}}}) 21:05:16 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x1003ff, 0xcc54e207, 0x8, 0x6, 0x7, 0x100, 0xff, 0x2, 0x8, 0x1, 0x22, {0x5010, 0xffffff01}, 0x9}}}) 21:05:16 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x1000, 0x0, {0x0, 0x2}, 0x26aa, 0x100}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x4002}, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="210100000800030000da0000000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x24}}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r4, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="e90228bd7000fbdbdf254c0000003800848008000200060000002c000680080001000800000008e4ed6beb6fc4f64149ec065c1286cb9bf6af94a880e28e40723184880003008100000008000200580c00000800030000000000080003000800000030691b8bd8540168687835d5e420db73be69557d4c5f503d00189482cdc03dba7a232062c9cd2bf534ee112967c281fe19057ac4e7b5886e93ecf27d5d14129e8dad23c0fd9359490682a0a03a0ed82a04f348e2d53bd1a9dd45349f55ffb0f0caf4668d3f1064b004f4f340c80268f06241c5705a4a10c2bf285323f46df80d8516a5e262a8d7e660d339ee736c2703fbcc"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4004050) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xfffffca8, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="0c7b2800000010df000800"/22, @ANYRES32=r7, @ANYBLOB="03bfd9e22b3dd78b3bfdb0010000005b25c491cff7be2026a63834c4c70000903fa4000000008d90045b2e69bdb87a4c754faf6a13cebbd1d257ed2e636d9cfa7e02e39ca081dab1c7d360aae3e9e46b126af7381e835f1e69b54c69cd9e2e9b3dc5b4ca200fe1925256114294bc"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=@newlink={0x48, 0x11, 0x40d, 0x0, 0x10, {0x0, 0x0, 0x0, r7}, [@IFLA_IFALIASn={0x4}, @IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}, @IFLA_GROUP={0x8, 0x1b, 0xffff8a88}, @IFLA_NET_NS_FD={0x8, 0x1c, r2}]}, 0x48}}, 0x0) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000440)={r7, 0x1, 0x6, @local}, 0x10) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000000)=0xd99a3a76f2b71f62) [ 357.288573][T12153] IPVS: ftp: loaded support on port[0] = 21 21:05:16 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 357.567708][T12180] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 357.654209][T12184] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 21:05:16 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc54e207, 0x8, 0x6, 0x7, 0x100, 0xff, 0x2, 0x8, 0x1, 0x22, {0x5010, 0xffffff01}, 0x9}}}) [ 357.853926][T12180] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12180 comm=syz-executor.0 [ 358.005043][T12188] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 358.169170][T12190] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12190 comm=syz-executor.0 [ 358.474554][T12184] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 358.670886][T12153] chnl_net:caif_netlink_parms(): no params data found [ 359.288769][T12153] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.296682][T12153] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.306203][T12153] device bridge_slave_0 entered promiscuous mode [ 359.432118][T12153] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.439349][T12153] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.448982][T12153] device bridge_slave_1 entered promiscuous mode [ 359.557805][T12153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.601162][T12153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.692535][T12153] team0: Port device team_slave_0 added [ 359.713590][T12153] team0: Port device team_slave_1 added [ 359.810064][T12153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.817306][T12153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.844557][T12153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.927786][T12153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.934951][T12153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.962023][T12153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.129153][T12153] device hsr_slave_0 entered promiscuous mode [ 360.194851][T12153] device hsr_slave_1 entered promiscuous mode [ 360.302029][T12153] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.309658][T12153] Cannot create hsr debugfs directory [ 360.579197][T12153] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 360.644224][T12153] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 360.756286][T12153] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 360.867115][T12153] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 361.286559][T12153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.328313][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 361.337251][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 361.361293][T12153] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.392730][T11747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 361.402358][T11747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 361.411492][T11747] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.418751][T11747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.482452][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 361.491402][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 361.501092][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 361.510315][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.517559][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.526588][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 361.536378][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 361.545874][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 361.555485][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 361.630438][T12153] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 361.641031][T12153] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 361.658051][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 361.667921][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 361.677787][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 361.686974][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 361.696326][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 361.706019][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 361.715561][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 361.792980][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 361.801396][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 361.809133][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 361.835566][T12153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.912974][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 361.923074][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 362.001557][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 362.011245][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 362.040249][T12153] device veth0_vlan entered promiscuous mode [ 362.057238][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 362.066315][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 362.094771][T12153] device veth1_vlan entered promiscuous mode [ 362.176213][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 362.185594][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 362.194942][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 362.204687][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 362.231133][T12153] device veth0_macvtap entered promiscuous mode [ 362.258474][T12153] device veth1_macvtap entered promiscuous mode [ 362.314812][T12153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 362.325881][T12153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.335911][T12153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 362.346460][T12153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.356489][T12153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 362.367482][T12153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.381483][T12153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.394560][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 362.403986][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 362.413265][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 362.423213][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 362.455257][T12153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 362.467733][T12153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.477781][T12153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 362.488322][T12153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.502219][T12153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.511549][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 362.521497][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 363.326284][T12234] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 363.349905][T12234] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 21:05:22 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, 0x7, 0x100, 0xff, 0x2, 0x8, 0x1, 0x22, {0x5010, 0xffffff01}, 0x9}}}) 21:05:22 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, r4}}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000000c0)=0x1, r4, 0x0, 0x0, 0x1}}, 0x20) 21:05:22 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:05:22 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 363.573142][T12239] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:05:22 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, 0x100, 0xff, 0x2, 0x8, 0x1, 0x22, {0x5010, 0xffffff01}, 0x9}}}) [ 363.669785][T12246] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 21:05:22 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/fscreate\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r4, 0x0) lseek(r4, 0x8000, 0x5) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r5, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80785659, &(0x7f0000000100)={0x0, @ctrl={0x0, 0x0, @value64}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r6, 0x0) ioctl$NBD_SET_FLAGS(r6, 0xab0a, 0x2) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "7c9ef1e8febabd49", "459414351399993750194ca4c6af2f3c", "f31727d5", "eb360b6862691d89"}, 0x28) 21:05:22 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:05:22 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 363.953663][ T33] audit: type=1400 audit(1584824723.007:56): avc: denied { map } for pid=12251 comm="syz-executor.0" path="/proc/12251/task/12252/attr/fscreate" dev="proc" ino=33483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=file permissive=1 21:05:23 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x100, 0xff, 0x2, 0x8, 0x1, 0x22, {0x5010, 0xffffff01}, 0x9}}}) [ 364.164386][T12259] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 364.176538][T12258] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 364.195427][T12259] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:05:23 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:05:23 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:05:23 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xff, 0x2, 0x8, 0x1, 0x22, {0x5010, 0xffffff01}, 0x9}}}) [ 364.593203][T12270] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 364.631285][T12271] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 364.650465][T12270] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:05:23 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000000)=0x62) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, r4, 0xc46dfc707e1df77d, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r4, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x90d3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x14}, 0x20000041) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x1000, 0x1, {0x8000, 0x7ff}, 0x6, 0x8b}}) 21:05:23 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x8, 0x1, 0x22, {0x5010, 0xffffff01}, 0x9}}}) 21:05:23 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000080)=0x1) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x9, 0x7, 0x7, 0x146d, 0x5, 0xf1, 0x47, 0x81, 0x6, 0x9, 0x4, 0xf0000000, 0x7, 0x9, 0x7, 0x296d, 0x5, 0x7, 0x3, 0x4, 0x9, 0x3ff, 0x31, 0x57, 0x0, 0x184, 0x1, 0x9, 0x158, 0x9, 0x1, 0x9]}) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000000)) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000040), 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r4, 0x0) ioctl$TIOCL_SETVESABLANK(r4, 0x541c, &(0x7f00000001c0)) 21:05:24 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:05:24 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x1, 0x22, {0x5010, 0xffffff01}, 0x9}}}) 21:05:24 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000000)=0x62) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, r4, 0xc46dfc707e1df77d, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r4, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x90d3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x14}, 0x20000041) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x1000, 0x1, {0x8000, 0x7ff}, 0x6, 0x8b}}) [ 365.383156][T12292] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 365.466990][T12292] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:05:24 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000000)=0x62) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, r4, 0xc46dfc707e1df77d, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r4, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x90d3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x14}, 0x20000041) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x1000, 0x1, {0x8000, 0x7ff}, 0x6, 0x8b}}) 21:05:24 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x22, {0x5010, 0xffffff01}, 0x9}}}) 21:05:24 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000080)={0x2, 0x5}) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x1c, 0xb, 0x1c, &(0x7f0000000340)="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"}) 21:05:24 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:05:25 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x22, {0x5010, 0xffffff01}, 0x9}}}) 21:05:25 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000000)=0x62) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, r4, 0xc46dfc707e1df77d, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x1000, 0x1, {0x8000, 0x7ff}, 0x6, 0x8b}}) 21:05:25 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000040)={0xfffffffffffffffb, 0x4, 0x0, 0xbbbbbbbb}) r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) [ 366.157070][T12312] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:05:25 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, {0x5010, 0xffffff01}, 0x9}}}) [ 366.254632][T12314] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:05:25 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000000)=0x62) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x1000, 0x1, {0x8000, 0x7ff}, 0x6, 0x8b}}) 21:05:25 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:05:25 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000000)={0x0, @reserved}) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) 21:05:25 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5010, 0xffffff01}, 0x9}}}) 21:05:25 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000000)=0x62) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x1000, 0x1, {0x8000, 0x7ff}, 0x6, 0x8b}}) [ 366.886565][T12335] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:05:26 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x8, @output={0x1000, 0x1, {0x2, 0x7ffe}, 0x2, 0x10000}}) [ 366.957921][T12335] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:05:26 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffff01}, 0x9}}}) 21:05:26 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:05:26 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000)=0x1, 0x4) r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) 21:05:26 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000000)=0x62) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x1000, 0x1, {0x8000, 0x7ff}, 0x6, 0x8b}}) 21:05:26 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x9}}}) [ 367.605491][T12351] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:05:26 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000000)=0x62) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x1000, 0x1, {0x8000, 0x7ff}, 0x6, 0x8b}}) 21:05:26 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) fanotify_init(0x2, 0x88000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r3, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[r0, 0xffffffffffffffff, r3]}, 0x3) 21:05:26 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) 21:05:26 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:05:27 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000000)=0x62) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, r4, 0xc46dfc707e1df77d, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r4, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x90d3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x14}, 0x20000041) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x1000, 0x1, {0x8000, 0x7ff}, 0x6, 0x8b}}) 21:05:27 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000000c0)) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x8, 0x4, 0x2, "b4ef8d9b912183f0fa4d469e2f063ff755543ad99ac8664cc3e771f234481a50", 0x50565559}) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x3, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) 21:05:27 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000000)=0x62) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x1000, 0x1, {0x8000, 0x7ff}, 0x6, 0x8b}}) [ 368.148124][T12375] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:05:27 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:05:27 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x1000, 0x1, {0x8000, 0x7ff}, 0x6, 0x8b}}) 21:05:27 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) 21:05:27 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x12001}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 368.702939][T12390] validate_nla: 2 callbacks suppressed [ 368.702966][T12390] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 368.828068][T12390] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:05:27 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) prctl$PR_SVE_SET_VL(0x32, 0x6489) [ 368.868794][T12398] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 21:05:28 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x1000, 0x1, {0x8000, 0x7ff}, 0x6, 0x8b}}) [ 368.952569][T12398] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:28 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:05:28 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x100, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000480)={0x3, @default, r3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r4, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc02c5625, &(0x7f0000000000)={0xfffffff9, 0xd1f9, @value=0xffffffffffffa8b4}) 21:05:28 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x1000, 0x1, {0x8000, 0x7ff}, 0x6, 0x8b}}) [ 369.820291][T12433] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 369.930582][T12433] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:05:29 executing program 3: ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x1000, 0x1, {0x8000, 0x7ff}, 0x6, 0x8b}}) 21:05:29 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x4, 0x189040) r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0cc5640, &(0x7f0000000040)={0x7, @sdr={0x42323151, 0x1f}}) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, r4, 0xa8c9830e441ccbe1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="b4010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1b4}}, 0x4001) 21:05:29 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x12001}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', r6}) 21:05:29 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 370.631389][T12456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12456 comm=syz-executor.0 21:05:29 executing program 3: ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x1000, 0x1, {0x8000, 0x7ff}, 0x6, 0x8b}}) 21:05:30 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x80300) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) [ 371.066764][T12464] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 371.106195][T12463] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 371.182987][T12464] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:30 executing program 3: ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x1000, 0x1, {0x8000, 0x7ff}, 0x6, 0x8b}}) 21:05:30 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:05:30 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x80000001) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x80000, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000080)={0xcaf, 0x8, 0x0, 0x9, 0x6, 0x9, 0x200}, 0xc) fcntl$setstatus(r1, 0x4, 0x869ae79ceae3650d) 21:05:31 executing program 3: r0 = syz_open_dev$video(0x0, 0x17, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x1000, 0x1, {0x8000, 0x7ff}, 0x6, 0x8b}}) [ 372.303755][T12494] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:05:31 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x2000) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x3, @raw_data="87f2641286b37a78b82958d6622b8c2295e6fc1d3bc5df5c39f0cca7853864f56fdc140815aaae38572b39677755ed7c5aad0d28fcf1a66dbe4d9d835bda64c47cb936ac55e4ae755e1d7306a8530b7eb3e6a7553687d7ced7b4d7b95e62fa9b4c161b619ec78e20c41a0fd1d3270ff239b679351b72531207b53b2c4c0cbb2b062fdf5b083b7a70f2b1a76badec944d972f6d97264c09ba99dde3f5490c462fc1e9c338ec2bc7cfdbb309b84afda7a0f207d2d350ff27e4872846d588883cc99712597e1b50d7cd"}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) ioctl$VIDIOC_G_FMT(r2, 0xc0cc5604, &(0x7f0000000140)={0x3, @pix_mp={0x1ff, 0xff, 0x302631d, 0x6, 0xb5a64119ff7ee9cc, [{0xff, 0x8}, {0x8000, 0x9}, {0x2, 0x5}, {0x8001, 0x53c}, {0xda5, 0x9}, {0x0, 0x3}, {0xbce, 0x4}, {0x5, 0x5}], 0x1, 0x8, 0x7, 0x2, 0x2}}) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2010004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1412, 0x10, 0x70bd2b, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x840) 21:05:31 executing program 3: r0 = syz_open_dev$video(0x0, 0x17, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x1000, 0x1, {0x8000, 0x7ff}, 0x6, 0x8b}}) 21:05:32 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x4, 0x189040) r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0cc5640, &(0x7f0000000040)={0x7, @sdr={0x42323151, 0x1f}}) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, r4, 0xa8c9830e441ccbe1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="b4010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1b4}}, 0x4001) 21:05:32 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:05:32 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x12001}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', r6}) 21:05:32 executing program 0: getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xfffffffe, 0x4103) write$P9_RLOPEN(r1, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0x10}, 0x9}}, 0x18) 21:05:32 executing program 3: r0 = syz_open_dev$video(0x0, 0x17, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x1000, 0x1, {0x8000, 0x7ff}, 0x6, 0x8b}}) [ 373.893823][T12533] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 373.955815][T12539] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 374.094849][T12535] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:33 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x4002}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="210100000800030000da0000000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r2, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xb0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008041}, 0x80) r3 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r3, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) 21:05:33 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:05:33 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x1000, 0x1, {0x8000, 0x7ff}, 0x6, 0x8b}}) 21:05:34 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x1000, 0x1, {0x8000, 0x7ff}, 0x6, 0x8b}}) [ 375.727168][T12556] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 375.996653][T12584] IPVS: ftp: loaded support on port[0] = 21 21:05:35 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x12001}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', r6}) 21:05:35 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:05:35 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r0, 0x0) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000040)={0xf380000000000000, 0x2000, 0x100000000, 0x0, 0xc}) r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000000)={0x1, 0x0, {0x7, 0x0, 0x9, 0x8}}) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) [ 376.736422][T12602] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 376.885264][T12605] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 377.125603][T12605] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 377.302454][T12584] chnl_net:caif_netlink_parms(): no params data found [ 377.897976][T12584] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.905297][T12584] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.914898][T12584] device bridge_slave_0 entered promiscuous mode [ 378.034280][T12584] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.041615][T12584] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.051242][T12584] device bridge_slave_1 entered promiscuous mode [ 378.180794][T12584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.215848][T12584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.268025][T12584] team0: Port device team_slave_0 added [ 378.284373][T12584] team0: Port device team_slave_1 added [ 378.327657][T12584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.335072][T12584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.361244][T12584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.382347][T12584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.389390][T12584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.415468][T12584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.649156][T12584] device hsr_slave_0 entered promiscuous mode [ 378.663745][ T0] NOHZ: local_softirq_pending 08 [ 378.669264][ T0] NOHZ: local_softirq_pending 08 [ 378.765185][T12584] device hsr_slave_1 entered promiscuous mode [ 378.872002][T12584] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.879622][T12584] Cannot create hsr debugfs directory [ 379.209965][T12584] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 379.331560][T12584] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 379.400090][T12584] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 379.520904][T12584] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 379.917147][T12584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.968254][T11747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 379.977161][T11747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 380.003441][T12584] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.037092][T11747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 380.047939][T11747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 380.057212][T11747] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.064482][T11747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.081064][T11747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 380.095016][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 380.104741][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 380.114057][T11568] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.121312][T11568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.187352][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 380.198717][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 380.209609][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 380.219939][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 380.233264][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 380.250119][T11747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 380.260472][T11747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 380.294019][T11747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 380.304312][T11747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 380.328912][T12584] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 380.343951][T12584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 380.355689][T11747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 380.365535][T11747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 380.442384][T11747] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 380.450083][T11747] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 380.495037][T12584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.700093][T11747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 380.710267][T11747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 380.790048][T11747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 380.801448][T11747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 380.815594][T11747] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 380.826208][T11747] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 380.846663][T12584] device veth0_vlan entered promiscuous mode [ 380.886287][T12584] device veth1_vlan entered promiscuous mode [ 380.957233][T11747] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 380.966604][T11747] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 380.997138][T11747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 381.007565][T11747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 381.026302][T12584] device veth0_macvtap entered promiscuous mode [ 381.061071][T12584] device veth1_macvtap entered promiscuous mode [ 381.114824][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 381.125400][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.135415][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 381.146747][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.156700][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 381.167220][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.177162][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 381.187662][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.201572][T12584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.210598][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 381.220202][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 381.230268][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 381.240213][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 381.298142][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 381.309447][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.319486][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 381.330007][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.339944][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 381.350455][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.364230][T12584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.373471][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 381.383485][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 21:05:41 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x4, 0x189040) r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0cc5640, &(0x7f0000000040)={0x7, @sdr={0x42323151, 0x1f}}) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, r4, 0xa8c9830e441ccbe1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="b4010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1b4}}, 0x4001) 21:05:41 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x1000, 0x1, {0x8000, 0x7ff}, 0x6, 0x8b}}) 21:05:41 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0cc5640, &(0x7f0000000000)={0x2, @pix={0x8, 0x0, 0x42475251, 0x9, 0x0, 0x7, 0xa, 0x2, 0x1, 0x8, 0x2}}) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) 21:05:41 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:05:41 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x12001}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', r6}) [ 382.405224][T12659] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 382.421528][T12655] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:05:41 executing program 3: syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x1000, 0x1, {0x8000, 0x7ff}, 0x6, 0x8b}}) [ 382.478838][T12659] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:41 executing program 0: syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r0, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000100)={0xc, @output={0x0, 0x0, {0x2, 0x9}, 0x1, 0x7}}) 21:05:41 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x4, 0x189040) r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0cc5640, &(0x7f0000000040)={0x7, @sdr={0x42323151, 0x1f}}) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, r4, 0xa8c9830e441ccbe1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="b4010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1b4}}, 0x4001) 21:05:41 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:05:42 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7, 0x101a40) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) 21:05:42 executing program 3: syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x1000, 0x1, {0x8000, 0x7ff}, 0x6, 0x8b}}) [ 383.329121][T12698] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:05:42 executing program 3: syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x1000, 0x1, {0x8000, 0x7ff}, 0x6, 0x8b}}) [ 383.791474][T12698] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:05:42 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r1 = socket$kcm(0x2, 0x2, 0x73) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000000a80), 0x40000000000005d, 0x10000, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000100)={0x6, 'vxcan1\x00', {0xea}, 0xfbd}) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000000)={0xc, @capture={0x1000, 0x1, {0x80000001, 0x9}, 0x8}}) 21:05:43 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x4, 0x189040) r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0cc5640, &(0x7f0000000040)={0x7, @sdr={0x42323151, 0x1f}}) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, r4, 0xa8c9830e441ccbe1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x2c}}, 0x0) 21:05:43 executing program 2 (fault-call:1 fault-nth:0): r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) 21:05:43 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:05:43 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, 0x0) [ 384.610622][T12736] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12736 comm=syz-executor.4 [ 384.628627][T12734] FAULT_INJECTION: forcing a failure. [ 384.628627][T12734] name failslab, interval 1, probability 0, space 0, times 0 [ 384.641526][T12734] CPU: 0 PID: 12734 Comm: syz-executor.2 Not tainted 5.6.0-rc6-syzkaller #0 [ 384.650263][T12734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 384.660372][T12734] Call Trace: [ 384.663750][T12734] dump_stack+0x1c9/0x220 [ 384.668186][T12734] should_fail+0x8b7/0x9e0 [ 384.672710][T12734] __should_failslab+0x1f6/0x290 [ 384.677730][T12734] should_failslab+0x29/0x70 [ 384.682378][T12734] __kmalloc_node+0x1b1/0x11f0 [ 384.687189][T12734] ? is_bpf_image_address+0x267/0x2b0 [ 384.692610][T12734] ? kvmalloc_node+0x19a/0x3c0 [ 384.697470][T12734] kvmalloc_node+0x19a/0x3c0 [ 384.702127][T12734] video_usercopy+0x28d/0x2b50 [ 384.706948][T12734] ? video_ioctl2+0xb0/0xb0 [ 384.711527][T12734] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 384.717663][T12734] ? stack_trace_save+0x123/0x1a0 [ 384.722751][T12734] ? kmsan_get_metadata+0x11d/0x180 [ 384.728001][T12734] ? kmsan_set_origin_checked+0x95/0xf0 [ 384.733603][T12734] ? kmsan_internal_poison_shadow+0x9f/0xd0 [ 384.739546][T12734] ? kmsan_internal_poison_shadow+0x66/0xd0 [ 384.745496][T12734] ? kmsan_slab_free+0x6e/0xb0 [ 384.750310][T12734] ? kmem_cache_free+0x33d/0x2cf0 [ 384.755375][T12734] ? putname+0x212/0x230 [ 384.759670][T12734] ? do_sys_openat2+0xd1b/0xd40 [ 384.764568][T12734] ? __ia32_compat_sys_open+0x293/0x2f0 [ 384.770157][T12734] ? do_fast_syscall_32+0x3c7/0x6e0 [ 384.775417][T12734] ? entry_SYSENTER_compat+0x68/0x77 [ 384.780758][T12734] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 384.786614][T12734] ? kmsan_get_metadata+0x4f/0x180 [ 384.791794][T12734] ? kmsan_get_metadata+0x11d/0x180 [ 384.797054][T12734] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 384.802911][T12734] video_ioctl2+0x9f/0xb0 [ 384.807293][T12734] ? video_usercopy+0x2b50/0x2b50 [ 384.812355][T12734] v4l2_ioctl+0x23f/0x270 [ 384.816728][T12734] ? v4l2_poll+0x400/0x400 [ 384.821187][T12734] do_video_ioctl+0x139f/0x10f80 [ 384.826272][T12734] ? kmsan_get_metadata+0x11d/0x180 [ 384.831547][T12734] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 384.837435][T12734] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 384.843558][T12734] ? do_vfs_ioctl+0x10cc/0x30c0 [ 384.848459][T12734] ? kmsan_get_metadata+0x11d/0x180 [ 384.853708][T12734] ? kmsan_get_metadata+0x11d/0x180 [ 384.858955][T12734] ? v4l2_poll+0x370/0x400 [ 384.863426][T12734] v4l2_compat_ioctl32+0x2b7/0x320 [ 384.868612][T12734] ? v4l2_fill_pixfmt+0x7e0/0x7e0 [ 384.873713][T12734] __se_compat_sys_ioctl+0x57c/0xed0 [ 384.879067][T12734] ? kmsan_get_metadata+0x4f/0x180 [ 384.884249][T12734] __ia32_compat_sys_ioctl+0xd9/0x110 [ 384.889681][T12734] ? compat_ptr_ioctl+0x150/0x150 [ 384.894759][T12734] do_fast_syscall_32+0x3c7/0x6e0 [ 384.899854][T12734] entry_SYSENTER_compat+0x68/0x77 [ 384.904994][T12734] RIP: 0023:0xf7faad99 [ 384.909111][T12734] Code: 90 e8 0b 00 00 00 f3 90 0f ae e8 eb f9 8d 74 26 00 89 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 384.928751][T12734] RSP: 002b:00000000f5da50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 384.937204][T12734] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0945662 [ 384.945204][T12734] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 384.953205][T12734] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 384.961203][T12734] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 384.970081][T12734] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 21:05:44 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f0000000000)) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) 21:05:44 executing program 2 (fault-call:1 fault-nth:1): r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) 21:05:44 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x4, 0x189040) r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0cc5640, &(0x7f0000000040)={0x7, @sdr={0x42323151, 0x1f}}) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') [ 385.529910][T12735] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:05:44 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, 0x0) 21:05:44 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@gettaction={0x30, 0x32, 0x309, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x40}]}, 0x30}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000000)) [ 385.875614][T12735] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:05:45 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000100)={0x7ff, 0xb54d, 0x9, 0x8, 0x10, "7e07158982c02eab"}) futex(&(0x7f0000000000)=0x1, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x1) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000140)=0xf06b) 21:05:45 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, 0x0) 21:05:45 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x4, 0x189040) r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0cc5640, &(0x7f0000000040)={0x7, @sdr={0x42323151, 0x1f}}) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) socket$netlink(0x10, 0x3, 0x0) [ 386.333527][T12762] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12762 comm=syz-executor.2 [ 386.474269][T12762] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12762 comm=syz-executor.2 21:05:45 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 386.573542][T12762] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12762 comm=syz-executor.2 [ 386.674089][T12762] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12762 comm=syz-executor.2 [ 386.729724][T12762] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12762 comm=syz-executor.2 21:05:45 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x0, @output={0x1000, 0x1, {0x8000, 0x7ff}, 0x6, 0x8b}}) 21:05:45 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2200, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) [ 386.841093][T12762] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12762 comm=syz-executor.2 [ 386.914852][T12762] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12762 comm=syz-executor.2 [ 386.979341][T12762] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12762 comm=syz-executor.2 [ 387.013940][ T3571] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len 21:05:46 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x4, 0x189040) r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0cc5640, &(0x7f0000000040)={0x7, @sdr={0x42323151, 0x1f}}) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) [ 387.102294][T12762] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12762 comm=syz-executor.2 [ 387.155372][T12780] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:05:46 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x0, @output={0x1000, 0x1, {0x8000, 0x7ff}, 0x6, 0x8b}}) [ 387.268231][T12780] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:05:46 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) 21:05:46 executing program 0: syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000000)={@none, 0x9}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000040)={0xd, 0x1, 0x81}) 21:05:46 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:05:46 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x4, 0x189040) r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0cc5640, &(0x7f0000000040)={0x7, @sdr={0x42323151, 0x1f}}) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') 21:05:46 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x0, @output={0x1000, 0x1, {0x8000, 0x7ff}, 0x6, 0x8b}}) 21:05:46 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @bt={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, {}, 0x8}}}) 21:05:46 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}]}, 0x20}}, 0x4040040) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000140)) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000000)=0x1) r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) [ 387.990475][T12808] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:05:47 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x4, 0x189040) r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0cc5640, &(0x7f0000000040)={0x7, @sdr={0x42323151, 0x1f}}) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) 21:05:47 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x0, 0x1, {0x8000, 0x7ff}, 0x6, 0x8b}}) 21:05:47 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000000c0)="d22090e202833e36ab1d8447a10fad3496b68f61188c24a8ffee27d610c48bc859a13bde736766cf39272e94b4", 0x2d) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) 21:05:47 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:05:47 executing program 4: syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x4, 0x189040) r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0cc5640, &(0x7f0000000040)={0x7, @sdr={0x42323151, 0x1f}}) 21:05:47 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x1000, 0x1, {0x5, 0x7}, 0x3, 0x40}}) 21:05:47 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x0, 0x0, {0x8000, 0x7ff}, 0x6, 0x8b}}) [ 388.661005][T12833] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:05:47 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x12001}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xf, 0x1, 0x60a, 0x8, 0x405, r1, 0x800, [], r6, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x40) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) 21:05:47 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:05:47 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x0, 0x0, {0x0, 0x7ff}, 0x6, 0x8b}}) 21:05:48 executing program 4: syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x4, 0x189040) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, &(0x7f0000000040)={0x7, @sdr={0x42323151, 0x1f}}) 21:05:48 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) ptrace$peeksig(0x4209, r1, &(0x7f0000000000)={0x3, 0x0, 0x2}, &(0x7f0000000340)=[{}, {}]) r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000080)={0x3ff, 0x80, 0x3, {0x2, @pix_mp={0x9, 0x4, 0x33363248, 0x4, 0x2, [{0x0, 0x1}, {0x8, 0x1e5d}, {0x9, 0x2}, {0x1, 0x4870}, {0xfffffe00, 0x5}, {0x9, 0x400}, {0x9, 0x3}, {0x81d8, 0xfffffa2a}], 0x7, 0x4, 0x2, 0x0, 0x2}}, 0x3ff}) [ 389.326088][T12854] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 389.413752][T12853] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:05:48 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x0, 0x0, {0x0, 0x7ff}, 0x6, 0x8b}}) [ 389.521586][ T33] audit: type=1400 audit(1584824748.567:57): avc: denied { map_create } for pid=12843 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 21:05:48 executing program 4: syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x4, 0x189040) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, &(0x7f0000000040)={0x7, @sdr={0x42323151, 0x1f}}) 21:05:48 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x4040) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x0, 0x0, {0x7, 0x400}, 0x9, 0x200}}) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f0000000140)={0xe0, 0x8, &(0x7f0000000040)="365f0d98fe4ffd10327ab53945efb7022f0471ca974a59df2aeffb97bb3289e4c4e651d3b336ae95bae3033ec4b3c27c2711c54a8cba862faf1a88bc92b0c014477a7e5c6a9dcae8e4eef064940a55e57d9bdb8811c63343fb4cd189bb1e5ff0c3095ee1c92fd30e48007d90286ad84b661391ecff3cb6177edd96ad8a8859bcaad95b1ca53b2b5ec77a5f59ae61a94e8d78303b50ba22f45573e4b93f7fd3d8aec7f1e4f59b9a88a7454e83bbd305fae8fc69b549c6c8a3b0a66a5876afc907bb556a87e3c799075a5b652802871f57499e7e603a07183a5d0b67082bdc974c8df84a635395", {0xffffff00, 0x24, 0x32314752, 0xc, 0x8, 0x80000001, 0x7, 0x6}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0a179d602c208bb20000010000000000080000000000000c001464797a3000000000"], 0x28}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20800000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x1c, r3, 0x400, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x4004000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r4, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, 0x13, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x44000) ioctl$VFIO_GET_API_VERSION(r4, 0x3b64) 21:05:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:05:49 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x0, 0x0, {0x0, 0x7ff}, 0x6, 0x8b}}) 21:05:49 executing program 4: syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x4, 0x189040) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, &(0x7f0000000040)={0x7, @sdr={0x42323151, 0x1f}}) [ 390.337212][T12890] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:05:49 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x121002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$VIDIOC_ENUMSTD(r1, 0xc0405619, &(0x7f0000000180)={0x80000000, 0x40000, "da5c2bb8cfae1ef97a1081d17993e6d61caf585af2c10a68", {0x40000002, 0x1}}) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000200)={0x3, @raw_data="72c6efdf52e26956ba858b3694db5aab053187efff6362869e544c2373803faed4af04c48095a7d900c9dfced8ccb0263d5280a2004e65330ca06287f3f9da05ecd1d12f3aabc250d0d220bbb1fc23e706c2bc1d474fe81bc565f7fea1ca003394d813f54c04a5a82f419865d311b618cacdfc23eff3984f37b354f71ea83f040e4335c476113890a2546bf3bcf9a9f33cdc2380848a60eef4c78b8ce0b7404e709ba7a4b1c1e84c85117982eb2c09ccca1cba2d21fc7a68a18d3a6c3d15d26a9fade2dd674f4a54"}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r3, 0x0) ioctl$FIGETBSZ(r3, 0x2, &(0x7f00000001c0)) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000140)) [ 390.423405][T12893] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:05:50 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:05:50 executing program 4: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0cc5640, &(0x7f0000000040)={0x7, @sdr={0x42323151, 0x1f}}) 21:05:50 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x0, 0x0, {0x8000}, 0x6, 0x8b}}) 21:05:50 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc044560f, &(0x7f00000000c0)={0x8, 0x1, 0x4, 0x20, 0x7ff, {0x0, 0x2710}, {0x4, 0x8, 0x1f, 0x7, 0x3, 0x0, "0363d90b"}, 0x81, 0x2, @offset=0x394, 0x1000, 0x0, r2}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) 21:05:50 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x401, 0xc, 0x3, "a674fa49641d7e58a80892ba9e03c2c3f6d87dc4a29d090c4333a9225d030474", 0x38323151}) [ 391.277304][T12909] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 391.375820][T12912] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:05:50 executing program 4: r0 = syz_open_dev$vivid(0x0, 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0cc5640, &(0x7f0000000040)={0x7, @sdr={0x42323151, 0x1f}}) 21:05:50 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x0, 0x0, {0x8000}, 0x6, 0x8b}}) 21:05:50 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x7f, 0xa, &(0x7f00000016c0)=[{&(0x7f0000000140)="a496e27390268d1920c816ba9d8193bebe6ecff94ad85d7db5d9e99b52465959c7eb13d276be1b2093e81f587f98df8cf5650a2087218b42ecf8e192e3a589b3279ea1a129e361298c212b4f8ed1ad66cf4aa2426aecfb6a3fc61a7091d018f945f285bb", 0x64, 0x1}, {&(0x7f0000000240)="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", 0xfc, 0x5}, {&(0x7f0000000340)="91f04a69238d7fe96042bf3523abec0b9549cab73f172fb9f8421bba082fb0f67cbe2d554ccde5dd373fed0f652b49e006c7b4c59975a4016cba7a48de477dc03f971021218d71e6380a5d5544c407bebd5cbf80f02f136408e335e7b319ecdaafb57059deb5c0831734de46a3c7b5f820b228d9e66795651c9b4c58e89eb06a680344a57fc97412e78011dac374880feec3cca3a513e36b50402275c81e42b61f050e733ba938fe44794d47444f5303ff9548d22d5ef3c91a6bec3eb8778cef3961e1c5a18b5a2d5f19c7117b83", 0xce, 0x1}, {&(0x7f0000000440)="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", 0x1000, 0x1}, {&(0x7f00000001c0)="16b47790d756252cc02413e4992b284254a959c61f5e966044d9484078fe47e59ecb740aacfa111626502e6a9229c26d", 0x30, 0x8}, {&(0x7f0000001440)="7752947436e82380bdc502df67ad02d2c4cc52d01fdd9acbd2602c308e531ec1dc65bf2c2af3", 0x26, 0x81}, {&(0x7f0000001480)="33ea6673d67cb04ddcebb4f2058d8522b9bce2ec58db7ec4f1bf611c9054ffe94494bb2a79a005d7b4e4d17ab90fbee118db277300ad167d523601c59621e8a8130a811c9b082cc2388359beb9f42ee9839b33e56ccbb3050258be85de22d72953308fdf04ca56c823495e723f2122f7d043f60644cc5415ddd24d0486414d55a668ba7f7c1daf746d5e25a568d9ac5f4d1fd87dfb6e0131cdc9db3cb13449", 0x9f, 0x401}, {&(0x7f0000001540), 0x0, 0x7}, {&(0x7f0000001580)="4a7f59ec6d02d1c5a82b30a390e4bd8b76521bbb9abc6027fb119f690585f01b77687b08cb7b757cc57a290f0d356500b78a89b106a59a50be666abba1398afd753dae598debbfe771f603b2954eb46576fe862f94368f1d5e5dc2b6f9b006331efc3caedb0883ac02ecaaa522329da1ff27d92fe3f11d4a91b04d6690f09a68758a720def6311c70a923b271bf0b71b38e54952fbf6aa2eed6bf8b5863a5f882b5d6f3d20dd", 0xa6, 0x5}, {&(0x7f0000001640)="ed0945ac45dab7394115c35a3b9d2e79b10772f23bbef27111696398a134933e55576c5f046b1d6b570a22cb1e2504231d65a41dd774ec46fc831e7cebaa63a9df579833221645ccc746b48c1080071180688b62df3a24649d03cc488e43587a0b322addd321c22e2c63eac239", 0x6d, 0x6}], 0x1090414, &(0x7f0000001880)=ANY=[@ANYBLOB="6771756f74612c6e6f7265636f766572792c6c6f67627566733d30303030303030303030303030303030303030352c7071756f74612c626172726965722c7571756f74612c7773796ed701646f6e745f6d6561737572652c0038c4b2f3e72a835a50f2aaa8422246c3a1b177e6eee229f414fdb63bfb325ce3b56df55d62a77d2661e9a961e42fe0154c61c5b951d732934bb3d81f90e4a433f91a9549ea7c28b15c4c1737e801da7b16d2caebd3f80ba7d597a48a03b0954a22f30f2905721ee457524e6cf9bec71ee5ff2209ffe5669f4618e508913db52a90f2a1ba71447c194d184e994db4c1b7afaba56777ff48a37e10"]) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7b, &(0x7f00000000c0)={r4}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000017c0)={r4, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}}, 0x3, 0x82, 0x298, 0x3, 0x8}, &(0x7f0000001540)=0x98) 21:05:50 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7b, &(0x7f00000000c0)={r4}, 0x8) sendto$phonet(r1, &(0x7f0000000180)="45d6e8fb176383799fc780353ea11acc64456db26d6602bbe840d9c418c958fc710f85c96059b3e2c713e5fa93f1db2292f6e3fc0e9c52171d65f445110ad588cb46cc66ee67be39bc9a2043f4d4f0e798949ac031", 0x55, 0x0, &(0x7f0000000080)={0x23, 0x2, 0x0, 0x9}, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000000)={r4, 0x22, "b10737d8cc1af6bfbf52cb8dba4353cf4d753b31915abee145e1f91ac7d7ccfa6b21"}, &(0x7f0000000040)=0x2a) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') readahead(r2, 0xff, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r5, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r5, 0xc0745645, &(0x7f0000000100)={0x7, [0x20, 0x1ff, 0x37ed, 0x8000, 0xd39, 0x9, 0x1f, 0x9, 0x900, 0x7, 0x4, 0x4, 0x0, 0x4, 0x7ff, 0x8, 0x1800, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x3, 0x2, 0xdb6, 0x2, 0x6, 0x0, 0x8000, 0x1000, 0x4, 0x4, 0x800, 0x7fff, 0x200, 0x5, 0xe4, 0x800, 0x7, 0x40, 0x401, 0x7, 0x124, 0x1, 0x2400, 0x0, 0x47], 0x1}) 21:05:50 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:05:51 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x0, 0x0, {0x8000}, 0x6, 0x8b}}) 21:05:51 executing program 4: r0 = syz_open_dev$vivid(0x0, 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0cc5640, &(0x7f0000000040)={0x7, @sdr={0x42323151, 0x1f}}) 21:05:51 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x0, 0x0, {0x8000}, 0x6, 0x8b}}) [ 392.184406][ T33] audit: type=1400 audit(1584824751.237:58): avc: denied { map } for pid=12930 comm="syz-executor.2" path=2F6D656D66643A73797A5F6D6F756E745F696D616765202864656C6574656429 dev="tmpfs" ino=35902 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 [ 392.424263][T12945] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:05:51 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x202400, 0x0) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @random="24ce0f9b200f"}, 0x10) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000100)=0x400, 0x4) r3 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r3, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) [ 392.489474][T12945] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:05:51 executing program 4: r0 = syz_open_dev$vivid(0x0, 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0cc5640, &(0x7f0000000040)={0x7, @sdr={0x42323151, 0x1f}}) 21:05:51 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) write$6lowpan_enable(r1, &(0x7f00000000c0)='1', 0x1) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x20}) 21:05:51 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x0, 0x0, {0x8000, 0x7ff}, 0x0, 0x8b}}) 21:05:51 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:05:52 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) [ 393.143040][T12977] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:05:52 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x0, 0x0, {0x8000, 0x7ff}}}) [ 393.200014][T12977] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:05:52 executing program 4: syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, &(0x7f0000000040)={0x7, @sdr={0x42323151, 0x1f}}) 21:05:52 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x1, 0xfffffffff0000000, 0xfffff000}) 21:05:52 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:05:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newtfilter={0x43c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x40c, 0x2, [@TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404}]}]}}]}, 0x43c}}, 0x0) [ 393.636978][T12988] IPVS: ftp: loaded support on port[0] = 21 [ 393.951525][T12999] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 394.046917][T13004] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 394.221724][T12988] chnl_net:caif_netlink_parms(): no params data found [ 394.467549][T12988] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.475165][T12988] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.484834][T12988] device bridge_slave_0 entered promiscuous mode [ 394.545680][T12988] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.553073][T12988] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.562718][T12988] device bridge_slave_1 entered promiscuous mode [ 394.667415][T12988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.689937][T12988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.743957][T12988] team0: Port device team_slave_0 added [ 394.760941][T12988] team0: Port device team_slave_1 added [ 394.811432][T12988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.818624][T12988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.844809][T12988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.868035][T12988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.875399][T12988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.901496][T12988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.018992][T12988] device hsr_slave_0 entered promiscuous mode [ 395.052853][T12988] device hsr_slave_1 entered promiscuous mode [ 395.091983][T12988] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.099617][T12988] Cannot create hsr debugfs directory [ 395.429562][T12988] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 395.471209][T12988] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 395.510639][T12988] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 395.561173][T12988] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 395.847614][T12988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.872818][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 395.880995][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 395.899121][T12988] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.915371][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 395.925319][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 395.934651][T11568] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.941887][T11568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.956198][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 395.969048][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 395.978408][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 395.987676][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.994843][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.015328][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 396.045154][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 396.054670][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 396.065407][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 396.093934][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 396.103300][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 396.113475][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 396.124541][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 396.134185][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 396.153263][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 396.162412][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 396.179629][T12988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 396.218535][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 396.226276][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 396.249660][T12988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.358721][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 396.368744][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 396.410743][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 396.420108][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 396.437529][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 396.447242][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 396.456198][T12988] device veth0_vlan entered promiscuous mode [ 396.485177][T12988] device veth1_vlan entered promiscuous mode [ 396.542611][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 396.551227][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 396.560265][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 396.569495][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 396.592883][T12988] device veth0_macvtap entered promiscuous mode [ 396.608461][T12988] device veth1_macvtap entered promiscuous mode [ 396.646818][T12988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 396.657867][T12988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.667947][T12988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 396.678481][T12988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.688457][T12988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 396.699136][T12988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.709120][T12988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 396.719648][T12988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.729628][T12988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 396.740200][T12988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.753681][T12988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.767422][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 396.777015][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 396.787014][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 396.800669][T12988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 396.812204][T12988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.822205][T12988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 396.832721][T12988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.842692][T12988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 396.853231][T12988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.863227][T12988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 396.874118][T12988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.886698][T12988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.896761][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 396.906445][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 21:05:56 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x0, 0x0, {0x8000}, 0x6, 0x8b}}) 21:05:56 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x6b) getsockopt$inet6_int(r0, 0x29, 0x24, 0x0, &(0x7f0000000140)) 21:05:56 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:05:56 executing program 0: syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x101400, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000040)={0x800, "6018a4ec5348dc78077ba5b535eaae4bb065c2aee2e4ca9192d84b3eb872267c", 0x3, 0x200, 0x8, 0x95, 0x0, 0x2, 0x5, 0x44}) 21:05:56 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) r1 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 21:05:56 executing program 4: syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, &(0x7f0000000040)={0x7, @sdr={0x42323151, 0x1f}}) [ 397.581323][T13047] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:05:56 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) socket(0x10, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='cmdline\x00') sendfile(0xffffffffffffffff, r2, 0x0, 0x80000001) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x1008201, 0x4) sendto$inet(r1, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x1f4, 0x0, 0xffffffffffffffff) 21:05:56 executing program 4: syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, &(0x7f0000000040)={0x7, @sdr={0x42323151, 0x1f}}) 21:05:56 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) [ 397.663575][T13047] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:05:56 executing program 0: ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000100)={0x71, 0xffffff07, 0x80}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc044565d, &(0x7f0000000040)={0x5, 0xc, 0x4, 0x40000000, 0x4, {0x0, 0x7530}, {0x3, 0xf, 0x0, 0x9, 0x1f, 0x20, "5c0b92aa"}, 0x8000, 0x3, @userptr=0x6000, 0x400, 0x0, r2}) 21:05:57 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x0, 0x0, {0x8000}, 0x6, 0x8b}}) 21:05:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 398.040159][ T33] audit: type=1400 audit(1584824757.087:59): avc: denied { kernel } for pid=13062 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 21:05:57 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r0, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100)='gtp\x00') sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000000e2ff0b000000", @ANYRES16=r1, @ANYBLOB="00012cbd700dd9dbdf250200000008000800000000000c0003000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048001}, 0x20000000) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1b) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000140)=r2) r3 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000000)) 21:05:57 executing program 4: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0cc5640, 0x0) 21:05:57 executing program 0: r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x10080, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) r2 = gettid() r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r3, 0x0) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1b) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) rt_tgsigqueueinfo(0x0, r4, 0x1e, &(0x7f0000000000)={0x3, 0x0, 0x2}) r5 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r5, 0xc0cc5616, &(0x7f0000000240)={0x1, @capture={0x0, 0x1, {0x1, 0x1}, 0x2, 0x6}}) [ 398.488445][T13081] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:05:57 executing program 5: ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x0, 0x0, {0x8000}, 0x6, 0x8b}}) [ 398.625118][T13079] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:05:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newtfilter={0x43c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x40c, 0x2, [@TCA_CGROUP_POLICE={0x408, 0x7, [@TCA_POLICE_RATE={0x404}]}]}}]}, 0x43c}}, 0x0) 21:05:57 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r0, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0xbc8a, 0x4) r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000180)=0x1) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000000)) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @local}, 0x10) r3 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000240)={0xcd3c, 0x0, [], {0x0, @bt={0x5, 0x7d6, 0x1, 0x2, 0x6, 0x9, 0x1000, 0x5, 0xffffffca, 0x7fffffff, 0x9fbd, 0x9, 0x3f, 0x10000, 0x0, 0xa, {0x5, 0x7fff}, 0x54, 0x5}}}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r4, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f00000000c0)=0x800, 0x4) 21:05:57 executing program 4: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0cc5640, 0x0) 21:05:57 executing program 5: ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x0, 0x0, {0x8000}, 0x6, 0x8b}}) 21:05:58 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:05:58 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @capture={0x0, 0x1, {0x8c, 0x4}, 0x4, 0x80000000}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r1, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000000)={0xb, {0x2c9, 0x100000, 0x4, 0x1f}, {0x38b, 0x3, 0x0, 0x8}, {0x100, 0x30000000}}) 21:05:58 executing program 4: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0cc5640, 0x0) 21:05:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0x6}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x4}}]}, 0x34}}, 0x0) 21:05:58 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)=0xffffff33) [ 399.418239][T13109] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:05:58 executing program 5: ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x0, 0x0, {0x8000}, 0x6, 0x8b}}) [ 399.543310][T13109] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:05:58 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000080)=0x28) fsmount(r1, 0x1, 0x9) 21:05:58 executing program 4: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0cc5640, &(0x7f0000000040)={0x0, @sdr={0x42323151, 0x1f}}) 21:05:58 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:05:58 executing program 5: r0 = syz_open_dev$video(0x0, 0x17, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x0, 0x0, {0x8000}, 0x6, 0x8b}}) 21:05:59 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x2000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e21, 0x6, @mcast1, 0x1}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa6}}, @in={0x2, 0x4e23, @multicast2}], 0x4c) 21:05:59 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000a06091c00b1640000000000000000e1050001000700000008000940000000000900020073797a320000000010000880"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:05:59 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x1a6) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) [ 400.155889][T13139] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:05:59 executing program 4: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0cc5640, &(0x7f0000000040)={0x0, @sdr={0x42323151, 0x1f}}) [ 400.227148][T13142] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 400.322197][ T33] audit: type=1400 audit(1584824759.367:60): avc: denied { create } for pid=13144 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 21:05:59 executing program 5: r0 = syz_open_dev$video(0x0, 0x17, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x0, 0x0, {0x8000}, 0x6, 0x8b}}) [ 400.416195][ T33] audit: type=1400 audit(1584824759.427:61): avc: denied { write } for pid=13144 comm="syz-executor.3" path="socket:[36369]" dev="sockfs" ino=36369 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 21:05:59 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) fcntl$getownex(r2, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r4, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r3, 0x7, r4, &(0x7f0000000100)={0xffffffffffffffff, r0}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) 21:05:59 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x1, 0x40000) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000040)={0x0, 0x0, {0x33, 0x7, 0x15, 0x6, 0x4, 0x1, 0x3, 0x31}}) 21:05:59 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:05:59 executing program 4: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0cc5640, &(0x7f0000000040)={0x0, @sdr={0x42323151, 0x1f}}) 21:05:59 executing program 5: r0 = syz_open_dev$video(0x0, 0x17, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x0, 0x0, {0x8000}, 0x6, 0x8b}}) [ 401.170903][T13169] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:06:00 executing program 3: r0 = socket(0x840000000002, 0x3, 0x200000000000ff) sendmmsg$inet(r0, &(0x7f0000000500)=[{{&(0x7f00000004c0)={0x2, 0x0, @empty}, 0x10, &(0x7f0000001500)=[{&(0x7f00000002c0)="acb3ae1e15e25b6df492e65750eb1eafb118c65b2e6a82d07ab7434586ae69ecc2b17f8b68cada93df92819fc5336dee", 0x30}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_retopts={{0x10}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3}]}}}], 0x28}}], 0x2, 0x0) 21:06:00 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x6, 0x400200) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x2, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) [ 401.211424][T13169] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:00 executing program 4: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0cc5640, &(0x7f0000000040)={0x7, @sdr={0x0, 0x1f}}) 21:06:00 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc044560f, &(0x7f00000000c0)={0x3, 0xc, 0x4, 0x40, 0x80, {}, {0x3, 0x2, 0x1, 0x9, 0x7, 0x1, "a546bb19"}, 0x1, 0x4, @fd=r1, 0x40, 0x0, r2}) write$P9_RREAD(r3, &(0x7f0000000240)={0xca, 0x75, 0x2, {0xbf, "25f597610edb56faa6bd6a8c071f0bf96458e790ea5192839a27bcd8dd7240a1e899118022cdb03aaa008d20da5f5ebf4228a3fa41fb5377599f7a88888a686352549bbd53c5ac37a99fb4a0775294cfd17c0e4f129ceb4317d3ccd4cb18953074cf0d4e9e52fd16e588eaa335551f4607765f8a16a755aaac6ac8dc7a458ebb49b2c456efea86b6a980eae514a0522ed72aa021d9daf27ec03f54453427bcbca96a0f8dde5791572246e59c34dd84ef9eeddfc4e02ff05b772a1f48e4d091"}}, 0xca) r4 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f0000000000)) 21:06:00 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x0, 0x0, {0x8000}, 0x6, 0x8b}}) 21:06:00 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:00 executing program 4: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0cc5640, &(0x7f0000000040)={0x7, @sdr}) 21:06:00 executing program 3: 21:06:00 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x0, 0x0, {0x8000}, 0x6, 0x8b}}) 21:06:00 executing program 0: syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sched\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$inet6_dccp_buf(r2, 0x21, 0xc0, &(0x7f0000000080)="5d63eb475cf1d9d4cb09dac1175abe33bbbf672dc5dbb479802016691c8c95a279da05a731b759e75f39e37954060a0c9f4db78f4910ac022f16dff325455b975b88235bd39f48f10885c9b2023ea5ce7fdf5053d881130836a3e6ffc1d34a1cdf5681b061a5eed12e4cfe45300ab3ec43df3055f14ee91e4bb832ff28bf3a63ac7bbd7d19cb26a2f8af8942202d93fa2a2117df104b86747d9dbf03d516bab630e63715a52dfeddff24ec1e743ad59227b83fa5c2d5b23141199cd570804487ce01f785906c098e697654543f018853a435e55d6e08564da38d393e6731160b5d3218", 0xe3) ftruncate(r1, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r0, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @capture={0x0, 0x0, {0xfffffe05, 0x4}, 0x5, 0x4c5}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r3, 0x0) ioctl$VIDIOC_QUERYBUF(r3, 0xc0445609, &(0x7f0000000180)={0x2a6, 0x6, 0x4, 0x400000, 0x4300, {0x0, 0x7530}, {0x3, 0x2, 0x2, 0x2, 0xff, 0x1, "0d763a9b"}, 0x6, 0x2, @offset=0x8, 0x4, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000340)={0x9, 0x4, 0x7}) 21:06:01 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$VIDIOC_ENUMSTD(r1, 0xc0405619, &(0x7f00000000c0)={0x7, 0x800000, "af3987a600ed733d2b707b08bb40865936393ff74ca8bf96", {0xe7a806b, 0x2}, 0x5}) 21:06:01 executing program 4: [ 402.065474][T13197] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 402.147048][ T33] audit: type=1400 audit(1584824761.197:62): avc: denied { map } for pid=13200 comm="syz-executor.0" path="/proc/13200/net/pfkey" dev="proc" ino=4026532845 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 21:06:01 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x0, 0x0, {0x8000}, 0x6, 0x8b}}) 21:06:01 executing program 3: r0 = socket(0x18, 0x60000003, 0x0) sendto(r0, 0x0, 0x0, 0xd, &(0x7f00000005c0)=@un=@file={0x0, './file0\x00'}, 0xa) [ 402.196959][T13197] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:01 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7c}}}) 21:06:01 executing program 0: rmdir(&(0x7f0000000000)='./file0\x00') r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) 21:06:01 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:01 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000280)={@link_local={0x3}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "bf6e00", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request}}}}}, 0x0) 21:06:01 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(chacha20,rmd128)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 21:06:01 executing program 5: syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x0, 0x0, {0x8000}, 0x6, 0x8b}}) [ 402.798578][T13224] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:06:01 executing program 0: mq_open(&(0x7f0000000000)='\x00', 0x40, 0x40, &(0x7f0000000040)={0x100, 0x3, 0x2, 0x80000000}) r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) [ 402.897736][T13224] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:02 executing program 2: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x7, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000100)="96b514453e2e514a21aa152fdf1bf1b8e124d7f63b7d10aa9472ac71c5cbd9102d4352ca21164695bb1d1a94c4006abddda43b13509d1ef360800dc69e7ace813a3f857f58512035580f333708b35f5e54c34227022595c56443b1c3e45fbc1370ad9514def0a42512a3a795bc1ee1fadcfc4edce459f9ac12f74cf776d56688c24ba40ee37c7687a1c276614e971526d148cc90ec573e53ef0fe33b49200e94285f941bd8b45c8f90868eb3cf4c4a8dd5", 0xb1}, {&(0x7f00000001c0)="2648ecc2d157b46175fdf648279b9433ff93eb2ecb9705549d6e88f47a8c385da387341a9c7b8ee0f45a811355ff4397cf3fd08c289fe00f996ebb6c6cdd8842d1eead794449e39bf3cbcbf1f0404acc3070b9281b27f6c25c550143144f0866e2ec5211dcb90d6fccf324d4af923c2bf0da3e63e6c27d39341049ca2a9dcc79eba24bd24e21be1316e4865fa5a292f04970e4b5", 0x94}, {&(0x7f0000000280)="4bb0f5403dbe04e72f7a0ee74f60a0a4a3bb2feb0945db2e0d69cde6ae0363c1a712c2f850b148e435b09b18bc02a532059a4e550ecc50c4b78bc219fa4f9f3f8911746740c70c92c1191df4a9a6d38d29ea1bef96659cbdfb8cd8c793e1374e82796140c605c16592d181296c636a0b5d5dcf1ef7df65300f0a1ac668994c470e64a25f81ac8e4df934b778b5c2fd4b19c793d80dd92b73a3cb8dd6d481a60ddf233ffa6bd40f12b9d951e6021798ee9ae5460ebf582b216a505e3927e7cd8ecb129d07e9f35e4ac5827ebf9469d06df4325186b8454a6c094d2e3c4d60afb11e23", 0xe2}], 0x3, 0xfffffffd) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) 21:06:02 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 21:06:02 executing program 5: syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x0, 0x0, {0x8000}, 0x6, 0x8b}}) 21:06:02 executing program 0: syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r0, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) 21:06:02 executing program 3: [ 403.494442][T13254] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:06:02 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0x7fff, 0x9) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) [ 403.592147][T13254] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:02 executing program 5: syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x0, 0x0, {0x8000}, 0x6, 0x8b}}) 21:06:02 executing program 0: ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) ioctl$FICLONE(r2, 0x40049409, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x3, 0x8000}, 0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r3, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000340)={'security\x00'}, &(0x7f0000000200)=0x54) mount$9p_tcp(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d30783030303030303030300cb330346532312c76657273696f6e3d397032303051c5633a42964a276f5adab3851404302e4c2c7065726d69745f647fe156b5feeee6b3a68263ff3285d6f9f4ed04e7ffb8125ec0d95886ef91fe1beb2177e0", @ANYRESDEC=r0, @ANYBLOB=',obj_user=self,\x00']) 21:06:03 executing program 3: 21:06:03 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:03 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000100)=0x8) 21:06:03 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$KVM_GET_TSC_KHZ(r3, 0xaea3) 21:06:03 executing program 3: 21:06:03 executing program 4: 21:06:03 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, 0x0) [ 404.445843][T13282] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 404.565475][T13286] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:03 executing program 3: 21:06:03 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000140)={0x80000000, 0x3ff, 0xffd, 0xc1, 0x5, 0x3, 0x5, 0x4, 0x200, 0xb6, 0x1, 0x0, 0x2, 0x2, &(0x7f00000000c0)=""/102, 0x4dba, 0x9, 0x7fff}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r3, 0x0) ioctl$VIDIOC_G_FMT(r3, 0xc0cc5604, &(0x7f0000000240)={0xc, @sliced={0x3ff, [0x81, 0x7, 0x1000, 0x6, 0x8, 0x8e57, 0xffff, 0x8001, 0x3, 0x6, 0x1, 0x67d, 0x7f, 0x2, 0x7, 0x0, 0x9, 0x5, 0x22, 0x7fff, 0x4, 0xc41, 0x1, 0xfff, 0x297, 0x9, 0x3, 0x9, 0xdd5, 0x984, 0x5, 0x101, 0x2000, 0x4ea, 0x3ad, 0x7, 0x93, 0x7f72, 0x7, 0x8a85, 0x58e, 0x7, 0x7f, 0xa2f4, 0xff, 0x400, 0x8000, 0xffff], 0x3}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f0000000180)={{0x1, @name="5569d468f1b5198905960693fd3fa7c75a25af2ba4100e1ab31023a410125330"}, 0x8, 0x101, 0xfffffffffffffc92}) 21:06:03 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2000, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r1, 0xc0445611, &(0x7f0000000080)={0x800, 0xb, 0x4, 0xe000, 0x401, {r2, r3/1000+30000}, {0x2, 0x8, 0xc9, 0x8, 0xf9, 0x11}, 0x207, 0x1, @offset=0x5, 0x3, 0x0, r0}) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e22, 0x7ff, @remote, 0x401}, {0xa, 0x4e22, 0x8, @mcast2, 0x6}, 0x3, [0x6, 0x1, 0x4c76, 0x5dc, 0x5, 0x18, 0x9, 0x9]}, 0x5c) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r5, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0xc080661a, &(0x7f0000000180)={{0x1, 0x0, @reserved="f149aba17a467d10ae0fd1dba878a860afba588c32a17e2a81d40b9225ede01d"}}) 21:06:03 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, 0x0) 21:06:03 executing program 4: 21:06:04 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:04 executing program 3: 21:06:04 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, 0x0) 21:06:04 executing program 4: 21:06:04 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x4, @multicast, 'gretap0\x00'}}, 0x1e) 21:06:04 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x40) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180)='SEG6\x00') ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$VIDIOC_G_EDID(r1, 0xc0245628, &(0x7f0000000140)={0x0, 0x200, 0x3d5, [], &(0x7f0000000100)=0x44}) 21:06:04 executing program 3: [ 405.360080][T13317] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 405.443276][T13314] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:04 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x0, @output={0x0, 0x0, {0x8000}, 0x6, 0x8b}}) 21:06:04 executing program 4: 21:06:04 executing program 1: socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:04 executing program 3: 21:06:04 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x1b2000) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc00c6419, &(0x7f0000000140)={0x1, &(0x7f0000000000)=""/46, &(0x7f0000000100)=[{0x7, 0xb5, 0x1, &(0x7f0000000040)=""/181}]}) 21:06:05 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x0, @output={0x0, 0x0, {0x8000}, 0x6, 0x8b}}) 21:06:05 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x81204101, &(0x7f00000000c0)) r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000000)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000240)=ANY=[@ANYBLOB="00000400aaaa31efb9218e381f767520aaaaaaaaaabbbc794bf6f804"]) [ 406.000379][T13341] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 406.082488][T13341] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:05 executing program 4: 21:06:05 executing program 3: 21:06:05 executing program 1: socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:05 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x0, @output={0x0, 0x0, {0x8000}, 0x6, 0x8b}}) 21:06:05 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) 21:06:05 executing program 4: 21:06:05 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)={0x4, 0x0, [{}, {}, {}, {}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f00000000c0)={0x80, 0x3, 0x1f}) 21:06:05 executing program 3: [ 406.702398][T13361] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 406.768622][T13361] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:05 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x0, 0x0, {}, 0x6, 0x8b}}) 21:06:05 executing program 0: syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1, 0x200) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e1305e0039b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r3, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, &(0x7f00000000c0)={0x7fff, [0xcc52, 0xff, 0x80, 0x3, 0x9, 0x9, 0x7e00, 0xfae5, 0x2, 0x8, 0x9, 0x2, 0x7, 0xfe, 0xffff, 0x101, 0x1000, 0x7, 0x4, 0x3, 0x8, 0x4, 0x3ff, 0xfff, 0x1f, 0xfff7, 0x7f, 0x3, 0x1ff, 0xc12, 0x5, 0x7, 0xfe01, 0x5, 0x1, 0x473, 0x7ff, 0x8, 0xffff, 0x6, 0xfffc, 0x1, 0x400, 0x6, 0x5, 0x7fff, 0x5, 0x1], 0x4}) 21:06:05 executing program 4: 21:06:06 executing program 1: socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:06 executing program 3: 21:06:06 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f00000000c0)={0x0, 0x0, [], {0x0, @bt={0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8000, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, {0x0, 0x7206}}}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) 21:06:06 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x0, 0x0, {}, 0x0, 0x8b}}) 21:06:06 executing program 4: 21:06:06 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x7, 0x0) rt_sigsuspend(&(0x7f0000000000)={[0x3, 0x3]}, 0x8) ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000000100)={{0x1, @name="f59dc3f7325f819f70a28f86a9a1cceeebbfa2b66103fb2949326d4025396c3d"}, 0x8, 0xe0, 0x2}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x101000, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r1, 0x80044326, &(0x7f0000000040)=0x7) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) [ 407.448327][T13388] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:06:06 executing program 3: [ 407.547453][T13388] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:06 executing program 4: 21:06:06 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) pipe2(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x86000) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000a80)=0x1, 0x4) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) 21:06:06 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x0, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:06 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x17, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output}) 21:06:07 executing program 3: 21:06:07 executing program 4: [ 408.207560][T13413] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:07 executing program 5: 21:06:07 executing program 3: 21:06:07 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x408101, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/prev\x00') r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000240)={0x2, 0x6, 0x0, 0x4}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r7, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc044565d, &(0x7f0000000100)={0x67, 0x9, 0x4, 0x10, 0x1d2, {r5, r6/1000+10000}, {0x1, 0xc, 0x4, 0xc7, 0x7, 0xfb, "13cf935a"}, 0x10000, 0x4, @fd=r2, 0x81, 0x0, r4}) 21:06:07 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x0, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:07 executing program 0: syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r0, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x2, @capture={0x0, 0x0, {0x28b1, 0x81}, 0x6, 0xa1}}) 21:06:07 executing program 4: 21:06:07 executing program 5: 21:06:07 executing program 3: 21:06:07 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x11c, r2, 0x20, 0x70bd27, 0x25dfdbff, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x24004094}, 0x20000000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0cc5640, &(0x7f0000000100)={0x6, @pix_mp={0x7, 0x4, 0x38414762, 0x2, 0x2, [{0x3, 0x8}, {0x6, 0x98}, {0x7fff, 0x401}, {0x100}, {0x80, 0xc0f}, {0x570d, 0x9}, {0x4}, {0x1000, 0x8}], 0x1, 0x5, 0x8, 0x2, 0x6}}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) [ 408.945185][T13435] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:08 executing program 4: 21:06:08 executing program 5: 21:06:08 executing program 0: ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000000)=0x200) r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 21:06:08 executing program 3: 21:06:08 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x0, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:08 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001140)={&(0x7f00000c2000/0x4000)=nil, &(0x7f0000760000/0x1000)=nil, &(0x7f0000172000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000935000/0x1000)=nil, &(0x7f0000935000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00005d1000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') sendfile(r2, r3, 0x0, 0x8b84) 21:06:08 executing program 4: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x1}]}}, &(0x7f0000004600)=""/210, 0x26, 0xd2, 0x8}, 0x20) 21:06:08 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000100)={0x802b, 0x3}) r3 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000000)) 21:06:08 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000480)="6653070002053c27bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee0f0fc00008e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0970fe2b9a77f08add3eac478b16d6f2c59957ab364884b3c5d05692e664ebf68", 0x7b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 409.655782][T13460] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:08 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 409.876005][T13467] BPF:[1] VOLATILE [ 409.880001][T13467] BPF:type_id=0 [ 409.883758][T13467] BPF: [ 409.886652][T13467] BPF:Invalid name [ 409.890420][T13467] BPF: [ 409.890420][T13467] [ 409.906190][T13468] BPF:[1] VOLATILE [ 409.910788][T13468] BPF:type_id=0 [ 409.914904][T13468] BPF: [ 409.917717][T13468] BPF:Invalid name [ 409.921484][T13468] BPF: [ 409.921484][T13468] 21:06:09 executing program 4: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x1}]}}, &(0x7f0000004600)=""/210, 0x26, 0xd2, 0x8}, 0x20) 21:06:09 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x7, &(0x7f00000000c0)=[{0xc0, 0x80, 0xb5, 0x392e}, {0x5, 0x7d, 0xff, 0xe65a}, {0x9, 0x3, 0x6, 0x7fffffff}, {0x6, 0x8, 0x9, 0x5}, {0xffff, 0x8, 0x20, 0x3}, {0x0, 0x0, 0xfa, 0x1ff}, {0x9, 0x3f, 0x1, 0x400}]}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) 21:06:09 executing program 0: syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0185648, &(0x7f0000000280)={0xf000000, 0x0, 0x2, r1, 0x0, &(0x7f00000001c0)={0xa2093d, 0x0, [], @p_u32=&(0x7f0000000140)=0x8}}) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f00000002c0)) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)={0x14, r3, 0x2, 0x70bd2b}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x17308400}, 0xc, &(0x7f0000000300)={&(0x7f0000000040)={0x40, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040800}, 0x60000040) 21:06:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0x0, 0x8001}) [ 410.229037][T13485] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 410.316305][T13485] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 410.370465][ T33] audit: type=1326 audit(1584824769.417:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=13489 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7faad99 code=0x0 21:06:09 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/current\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000000)={0x2, 0x1, [0x3, 0x1, 0x6, 0xdd9, 0x2, 0x9, 0x4, 0x8]}) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc2b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd07901000100000000003b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c00"}) [ 410.419532][T13498] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 410.426008][T13495] BPF:[1] VOLATILE [ 410.440018][T13495] BPF:type_id=0 [ 410.443610][T13495] BPF: [ 410.446414][T13495] BPF:Invalid name [ 410.450170][T13495] BPF: [ 410.450170][T13495] 21:06:09 executing program 4: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x1}]}}, &(0x7f0000004600)=""/210, 0x26, 0xd2, 0x8}, 0x20) 21:06:09 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:09 executing program 5: 21:06:09 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7b, &(0x7f00000000c0)={r4}, 0x8) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ashmem\x00', 0x140, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000040)={r4, @in={{0x2, 0x4e22, @rand_addr=0x8001}}, 0x1, 0x2, 0x8000, 0x20, 0x2}, &(0x7f0000000100)=0x98) 21:06:09 executing program 4: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x1}]}}, &(0x7f0000004600)=""/210, 0x26, 0xd2, 0x8}, 0x20) [ 410.827635][T13509] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 410.840406][T13510] BPF:[1] VOLATILE [ 410.844593][T13510] BPF:type_id=0 [ 410.848093][T13510] BPF: [ 410.850903][T13510] BPF:Invalid name [ 410.854743][T13510] BPF: [ 410.854743][T13510] [ 410.878912][T13509] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 411.118095][T13519] BPF:[1] VOLATILE [ 411.122714][T13519] BPF:type_id=0 [ 411.126218][T13519] BPF: [ 411.129030][T13519] BPF:Invalid name [ 411.132952][T13519] BPF: [ 411.132952][T13519] 21:06:11 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x3c}}, 0x0) 21:06:11 executing program 5: 21:06:11 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:11 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x24, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_HARD_IFINDEX={0x4}]}, 0x24}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x12001}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008001}, 0x800) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) 21:06:11 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x1}]}}, &(0x7f0000004600)=""/210, 0x26, 0xd2, 0x8}, 0x20) 21:06:11 executing program 0: setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000040), 0x4) r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x680403, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c5e3afc2ed5d02fa5fa5b6d6eefd44f41863d34678d3d872ebf8fa6ff47cb91dc38f6de6df00e3bd192afc7b41073164d6011d097f3b6c1d0f27f61f42be0d17482b9c3c7bd75f797de8afc71321d7cbe466", @ANYRES16=r2, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000000)={0xa, 0x1}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="000000007ede272d8134f42c9aff780748afd5b3659b42b891d3590048dd67f9d49df617007d56e06fc6275f45585cf80e1588c4e616e4f1983e7836a353d1cdfbaec778a9896398ec5b93905601f266946decb4acb006b399a65add1d713b0e993999b301dcc641fa10225e84874e08ac682283a7f92289e5d58cc29c82344adb2e4753a50fd9cbcfae5c9bef5ea32f530b", @ANYRES16=r2, @ANYBLOB="00082cbd7000ffdbdf250600000005000100010000002700070073797374656d5f753a6f626a6563745f723a7061737377645f657865635f743a7330000005000100010000002a00070073797374656d5f753a6f626a6563745f723a7373685f6167656e745f657865635f743a733000000008000500000000002900070073797374656d5f753a6f626a6563745f723a69707461626c65735f636f6e665f743a73300000000008000400ac14142514000300ff020000000000000000000000000001"], 0x3}, 0x1, 0x0, 0x0, 0x40084}, 0xc010) socketpair(0x11, 0x800, 0x200, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r2, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr="a404e45dc7ece7ddd91780d1d40b21ba"}]}, 0x28}, 0x1, 0x0, 0x0, 0x884}, 0x4000000) [ 413.029496][T13534] BPF:[1] VOLATILE [ 413.033750][T13534] BPF:type_id=0 [ 413.037291][T13534] BPF: [ 413.040101][T13534] BPF:Invalid name [ 413.044070][T13534] BPF: [ 413.044070][T13534] [ 413.123792][T13533] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 413.153788][T13535] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:12 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 413.179954][T13533] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:12 executing program 0: prctl$PR_SVE_GET_VL(0x33, 0x16cea) r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x183, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x105000, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x3f, 0x5, 0x3, "0126c70ad9308dacca62e8f9a4e04e5445aa47b68ae9df0fed65ab049fac8aa6", 0x30314442}) 21:06:12 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x1}]}}, &(0x7f0000004600)=""/210, 0x26, 0xd2, 0x8}, 0x20) [ 413.375722][T13538] IPVS: Error connecting to the multicast addr 21:06:12 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, 0x0, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 413.636158][T13540] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 413.676352][T13567] BPF:[1] VOLATILE [ 413.680331][T13567] BPF:type_id=0 [ 413.684309][T13567] BPF: [ 413.687125][T13567] BPF:Invalid name [ 413.690985][T13567] BPF: [ 413.690985][T13567] 21:06:12 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1100082) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet(0x2, 0x3, 0x10) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180), 0x0) r4 = memfd_create(&(0x7f0000000080)='t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r4) write(r0, &(0x7f00000000c0)="769af993b3d12a75b368db1f07128c23e1095e1716cc1ee72a", 0x19) 21:06:13 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xe) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) prctl$PR_GET_FP_MODE(0x2e) [ 414.025857][T13571] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:06:13 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x1}]}}, &(0x7f0000004600)=""/210, 0x26, 0xd2, 0x8}, 0x20) 21:06:13 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0xb4}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x1, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) [ 414.504142][T13587] BPF:[1] VOLATILE [ 414.508306][T13587] BPF:type_id=0 [ 414.512410][T13587] BPF: [ 414.515229][T13587] BPF:Invalid name [ 414.518983][T13587] BPF: [ 414.518983][T13587] 21:06:13 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000037000505d25a80648c63940d0324fc60100010400a000000053582c137153e370948018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) [ 414.799306][T13575] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:14 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00006a01041d5b00000000000000000c0000010600064000050000"], 0x1}, 0x1, 0x0, 0x0, 0x20000000}, 0x48004) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) r3 = openat(r2, &(0x7f0000000100)='./file0\x00', 0x490400, 0x0) ioctl$IMHOLD_L1(r3, 0x80044948, &(0x7f0000000240)=0x6c1) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) 21:06:14 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) gettid() r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, 0x3, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x24, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x36}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x800}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x7}]}}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_NAT_DST={0x28, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x2206}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @CTA_TUPLE_ORIG={0x28, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x40}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1f}]}, 0xb0}, 0x1, 0x0, 0x0, 0x90}, 0x880) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r3, 0x0) ioctl$FICLONE(r0, 0x40049409, r3) r4 = syz_open_procfs(r1, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r4, 0x0) ioctl$VIDIOC_S_PARM(r4, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) 21:06:14 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x1}]}}, &(0x7f0000004600)=""/210, 0x26, 0xd2, 0x8}, 0x20) 21:06:14 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, 0x0, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:14 executing program 3: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 21:06:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x48}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x40000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x20, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 415.673971][T13619] BPF:[1] VOLATILE [ 415.678055][T13619] BPF:type_id=0 [ 415.681562][T13619] BPF: [ 415.684666][T13619] BPF:Invalid name [ 415.688429][T13619] BPF: [ 415.688429][T13619] 21:06:14 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7b, &(0x7f00000000c0)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000000)={r4, @in={{0x2, 0x4e22, @empty}}, 0x1}, &(0x7f00000000c0)=0x88) [ 415.875979][T13623] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 415.993530][T13625] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:15 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7b, &(0x7f00000000c0)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r4, 0x50}, &(0x7f0000000100)=0x8) 21:06:15 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x5, 0x9, 0x7, 0xbf, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000200), &(0x7f0000000100)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket(0x0, 0x80002, 0x0) 21:06:15 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x1}]}}, &(0x7f0000004600)=""/210, 0x26, 0xd2, 0x8}, 0x20) 21:06:15 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, 0x0, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 416.781022][ T33] audit: type=1400 audit(1584824775.827:64): avc: denied { map_read map_write } for pid=13648 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 21:06:15 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x7fff, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000080)="9951fedf7cec187aef132ed08c77b9ece995bbf2f1", 0x15, 0x401}, {&(0x7f00000000c0)="247217a236f1453a99dbf51d63c142fd7d480766adfa044c0b233e21746f3a47d1611e14075553b44b7906e2df0d8f578d2f5c0e1ad9640a7805fcce516ca1515edfa85aa38c49c6954eee8013f03153da387cd941c1c938b84e3b73a7ecf35f8ef46472d2655372fbbaa73a551de45ca5003becb2010a72c8d57bdbc8dc8e38905a5b3dab0f1b1b8989985177abb1e6b50f3ff8d9cc5b679ed91ca3a3fbd395343251ce6d3ff452426337739fbdc9fb8bacd4f09ea5857b11bef725b8bcc6be1295152079b85537dd21ddbd26438653c3ea34b0fecf81", 0xd7, 0x3}, {&(0x7f0000000340)="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", 0x1000, 0x34cd}], 0xa8481, &(0x7f0000001340)=ANY=[@ANYBLOB="6e725f626c653d6d25336d356d2c687567653d616c776179733d75736572766d6e65743025656d30626465769126707070305d2c6e725f696e6f6465733d6d2d2c6d706f6c3d6c6f63616c3d72656c61746976653a32342c687567653d616c776179733d6e6f64657673656c696e7578496d000473756d2c646566636f6e7465752c00"/141]) r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) 21:06:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) [ 416.879688][T13658] BPF:[1] VOLATILE [ 416.883904][T13658] BPF:type_id=0 [ 416.887405][T13658] BPF: [ 416.890206][T13658] BPF:Invalid name [ 416.894105][T13658] BPF: [ 416.894105][T13658] 21:06:16 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1b) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f0000000140)='net/kcm\x00') r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x112, r4, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f00000000c0)) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r5, 0x0) r6 = socket$bt_cmtp(0x1f, 0x3, 0x5) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)) [ 416.956491][T13657] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 417.093449][T13657] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:16 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x1}]}}, &(0x7f0000004600)=""/210, 0x26, 0xd2, 0x8}, 0x20) 21:06:16 executing program 3: pipe(&(0x7f00000001c0)) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x7, 0x0) ioctl$KDGKBLED(r0, 0x4004510d, &(0x7f0000000140)) [ 417.320566][T13670] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 417.422813][T13670] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 21:06:16 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000000)={0x1, @output={0x1000, 0x1, {0xfffffffa, 0x7fff}, 0x3, 0x200}}) 21:06:16 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 417.523105][T13675] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 417.602515][T13675] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 21:06:16 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r0, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e23, 0x5c5, @local, 0xfffffeff}, {0xa, 0x4e24, 0x4, @ipv4={[], [], @loopback}, 0x5}, 0xfff8, [0x5, 0x6000000, 0x3f, 0x3f, 0x8000, 0x1, 0x0, 0x3]}, 0x5c) r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000000)) [ 417.737039][T13683] BPF:[1] VOLATILE [ 417.741097][T13683] BPF:type_id=0 [ 417.744966][T13683] BPF: [ 417.747802][T13683] BPF:Invalid name [ 417.751562][T13683] BPF: [ 417.751562][T13683] 21:06:16 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001804000000000000ec000000ec00400007fd4eb3e097000000000000000a0000050000003d0a04fb4179bcf5004f3a00f2ffffff00000000000063537113f3020000005000000000000000000000000000ed00000000000000af0000000000000000000000be079ec80e694e8f432760ebae9f00002b0a31d0e70000000000000006339f69dfadb72aaa3200006f34a7fa668bb9b302af9d7700737b8cba19d96e8d91e87758b0b120c7734953be0048bd07bc2317073e6825fbcfb768f8f5b1e994eeeb3005c6b457d4d285c882ca65a97b00882fee3498658a4009565f17972b79c5d054eee26fd8382b3a9f0fd92faf75354b2cf3feb628d0d37e395b0862ab8c9a34fe15ddbb713d3fed65c45e07894012752cb183e43f24882f8deff026259996351d589dfa0894f295a3b76da1c8dde41dbab19909a3ce7ea51fdd88dd6a8f4b9a66f62dcfb9048b511ce830bc0b25a4e1485b7b5901ce5a93", @ANYRESDEC], 0x0, 0x174}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000340)=""/270, 0x10e}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:06:16 executing program 3: pipe(&(0x7f00000001c0)) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x7, 0x0) ioctl$KDGKBLED(r0, 0x4004510d, &(0x7f0000000140)) 21:06:17 executing program 4: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) [ 417.948250][T13688] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 418.036788][T13688] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:17 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0445609, &(0x7f0000000040)={0xd1b, 0xb, 0x4, 0x1000, 0x1a, {}, {0x5, 0x2356ae78f302e936, 0xfc, 0x7, 0x1, 0x4, "5edf3691"}, 0x8, 0x1, @userptr=0x1f, 0x2, 0x0, r1}) r3 = socket$netlink(0x10, 0x3, 0x15) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000007c0)={0x14, r4, 0xffff}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x120, r4, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x6}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x6, 0x4, 0x1}}]}, 0x120}, 0x1, 0x0, 0x0, 0x9c628f087733019e}, 0x4000080) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000000)) 21:06:17 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) dup3(r1, r0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, 0xfffffffffffffffe, 0x0, 0x0) ioctl$VIDIOC_QBUF(r2, 0xc044560f, &(0x7f0000000100)={0x3, 0x0, 0x4, 0x2000, 0x8a72, {}, {0x3, 0xc, 0x9, 0x7f, 0x1, 0x6, "35b7f105"}, 0xfffffffb, 0x6, @planes=&(0x7f00000000c0)={0x7, 0x3, @fd, 0x3}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, {0x0, 0x4}}}}) 21:06:17 executing program 4: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) [ 418.301208][ T33] audit: type=1400 audit(1584824777.347:65): avc: denied { create } for pid=13703 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 21:06:17 executing program 3: pipe(&(0x7f00000001c0)) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x7, 0x0) ioctl$KDGKBLED(r0, 0x4004510d, &(0x7f0000000140)) 21:06:17 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 418.434977][ T33] audit: type=1400 audit(1584824777.417:66): avc: denied { write } for pid=13703 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 21:06:17 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @bt={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, {0x3}}}}) 21:06:17 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) open_tree(r2, &(0x7f0000000080)='./file0\x00', 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) sched_setparam(r1, &(0x7f0000000040)=0x7) write$P9_RFSYNC(r0, &(0x7f0000000000)={0x7, 0x33, 0x2}, 0x7) r3 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r3, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) 21:06:17 executing program 4: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) [ 418.808475][T13723] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:06:17 executing program 3: pipe(&(0x7f00000001c0)) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x7, 0x0) ioctl$KDGKBLED(r0, 0x4004510d, &(0x7f0000000140)) [ 418.875569][T13723] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:20 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') 21:06:20 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:20 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) getresgid(&(0x7f0000000480)=0x0, &(0x7f00000004c0), &(0x7f0000000500)) r2 = socket(0x1e, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r3, 0x0) r4 = socket(0x1e, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r5, 0x0) fstat(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r8) r9 = socket(0x1e, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r10, 0x0) r11 = socket(0x1e, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r12, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="02000000010004000000000002000100", @ANYRES32=0x0, @ANYBLOB="c04b112721414f471c86e8cd625106af94797c1c8021758c1a3da7f77a6a9247300c803d9c", @ANYRES32=0x0, @ANYBLOB="02000500", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="040002000000000008000200", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="08000400", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=r6, @ANYBLOB="08000200", @ANYRES32=r8, @ANYBLOB="08000400", @ANYRES32=r10, @ANYBLOB="08000200", @ANYRES32=r12, @ANYBLOB="10000300000000002000050000000000"], 0xc4, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @bt={0xf6, 0x8, 0x1, 0x6, 0x0, 0x8, 0x6, 0x2, 0x2, 0x5, 0x5, 0x2, 0x6, 0x4, 0x4, 0x0, {0x400, 0xd0}, 0xf3, 0x2}}}) 21:06:20 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000000)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000100)={0x0, @reserved}) 21:06:20 executing program 4: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000004600)=""/210, 0x0, 0xd2, 0x8}, 0x20) 21:06:20 executing program 3: pipe(&(0x7f00000001c0)) ioctl$KDGKBLED(0xffffffffffffffff, 0x4004510d, &(0x7f0000000140)) 21:06:20 executing program 4: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000004600)=""/210, 0x0, 0xd2, 0x8}, 0x20) [ 421.253051][T13747] BPF:hdr_len not found [ 421.308262][T13746] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 421.359073][T13746] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:20 executing program 3: pipe(&(0x7f00000001c0)) ioctl$KDGKBLED(0xffffffffffffffff, 0x4004510d, &(0x7f0000000140)) 21:06:20 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x800, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000040)) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) 21:06:20 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x4000) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x127) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/158, 0x9e}], 0x1, 0x7) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x4, 0x0, [], {0x0, @bt={0xa83, 0x6, 0x0, 0x3, 0x9, 0x0, 0x9, 0x2, 0x3, 0x4000, 0x80000000, 0x7, 0x6, 0x7, 0xa, 0x0, {0x2, 0x100006}, 0x7c, 0x8}}}) 21:06:20 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, 0x0, 0x0, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:20 executing program 4: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000004600)=""/210, 0x0, 0xd2, 0x8}, 0x20) [ 421.658131][T13764] BPF:hdr_len not found 21:06:20 executing program 5: sync() rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000000)='./file2\x00') r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getpeername$unix(r0, 0x0, 0x0) 21:06:20 executing program 3: pipe(&(0x7f00000001c0)) ioctl$KDGKBLED(0xffffffffffffffff, 0x4004510d, &(0x7f0000000140)) 21:06:21 executing program 4: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000004600)=""/210, 0x1a, 0xd2, 0x8}, 0x20) [ 422.052961][T13778] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 422.077964][T13780] BPF:hdr_len not found [ 422.197935][T13778] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:21 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x115802, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0xffffffc1}}}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') read(r0, &(0x7f0000000100)=""/82, 0x52) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00', r2}, 0x10) 21:06:21 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000005e0081aee4050c00000f0000008bc609f6d8ff", 0x17}], 0x1}, 0x0) r3 = socket$kcm(0x2, 0x0, 0x2) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0), 0x4) recvmsg(r3, &(0x7f000000c0c0)={&(0x7f000000a880)=@xdp, 0x80, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000006c0)=""/231, 0xe7}, {&(0x7f000000be40)=""/122, 0x7a}], 0x4}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x401c5820, 0x7ffcc25bb000) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) [ 422.317130][T13791] BPF:No type found 21:06:21 executing program 4: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000004600)=""/210, 0x1a, 0xd2, 0x8}, 0x20) 21:06:21 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, 0x0, 0x0, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:21 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x7, 0x0) ioctl$KDGKBLED(r0, 0x4004510d, &(0x7f0000000140)) 21:06:21 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000340)={0x2, "b429fa9fbdce76a8859bb2592492f39623ac8f1de542851e41e4abdd6b661dc2", 0x2, 0x80, 0xc3, 0x3, 0x1, 0x1, 0x10000, 0x6}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f00000001c0)) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01007c3cc49c28104772cd00000000fd9bdf250100f10017802f01ffe600e4030000000c00"], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r4, 0x2, 0x70bd29, 0x259fdbdc, {{}, {}, {0x8, 0x11, 0x2f6e}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x10) [ 422.675951][T13802] BPF:No type found [ 422.751611][T13812] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 422.760226][T13812] team0: Device macvtap0 is up. Set it down before adding it as a team port 21:06:22 executing program 4: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000004600)=""/210, 0x1a, 0xd2, 0x8}, 0x20) [ 422.927387][T13810] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 423.032345][T13810] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:22 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x7, 0x0) ioctl$KDGKBLED(r0, 0x4004510d, &(0x7f0000000140)) 21:06:22 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, 0x0, 0x20040884) sendmsg$kcm(r0, &(0x7f0000001d40)={&(0x7f0000000740)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001bc0)="01", 0x3c}], 0x1}, 0x0) [ 423.318794][T13825] BPF:No type found 21:06:22 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, 0x0, 0x0, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:22 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x7, 0x0) ioctl$KDGKBLED(r0, 0x4004510d, &(0x7f0000000140)) 21:06:22 executing program 4: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile]}}, &(0x7f0000004600)=""/210, 0x26, 0xd2, 0x8}, 0x20) [ 423.869538][T13840] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 423.952609][T13840] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:23 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}}}) 21:06:23 executing program 3: pipe(0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x7, 0x0) ioctl$KDGKBLED(r0, 0x4004510d, &(0x7f0000000140)) 21:06:23 executing program 4: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile]}}, &(0x7f0000004600)=""/210, 0x26, 0xd2, 0x8}, 0x20) 21:06:23 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:23 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, 0x0, 0x20040884) sendmsg$kcm(r0, &(0x7f0000001d40)={&(0x7f0000000740)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001bc0)="01", 0x3c}], 0x1}, 0x0) 21:06:23 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001980)='/dev/zero\x00', 0x101400, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000019c0)=0xffffffffffffffff, 0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/slabinfo\x00', 0x0, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f0000000100)="f09166990f9d7cd030d90782c01bb1abf724d0a90438552aa1a1278f71b3c25bee3de02772a525a5f5d2440b81dcefe38ae1aa524a922584543a1dddab6b1e363bf48d0bfbb95f7ad41a642d4f6feff7fccdbc", 0x53) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000240)={0x5}) r2 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x400000) io_setup(0x3, &(0x7f0000000180)) creat(&(0x7f00000001c0)='\x00', 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r5, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r5, 0xc0044d19, &(0x7f0000000280)=0x2d) ioctl$KVM_GET_PIT(r3, 0xc048ae65, &(0x7f00000002c0)) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r6, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) io_cancel(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5, 0x2, r6, &(0x7f0000000340)="090531c934b834184ba361473f5717b23af55a8f5adead5868ecf23355c602265c3624911fe3a7dcee67239858668120ed625ec226d80148a248b43c58094defe77ad7b996d9ceab7922f41655ac21c44e0af15eb5d8062715ae9d477e621f2a85e8", 0x62, 0x2, 0x0, 0x0, r4}, &(0x7f0000000400)) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000040)="dbb18120b242a217c399316c17df3d8b", 0x10) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000440)={0x2, @output={0x0, 0x1, {0x3, 0x1}, 0x2, 0x4}}) [ 424.715894][T13861] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:06:23 executing program 3: pipe(0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x7, 0x0) ioctl$KDGKBLED(r0, 0x4004510d, &(0x7f0000000140)) 21:06:23 executing program 4: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile]}}, &(0x7f0000004600)=""/210, 0x26, 0xd2, 0x8}, 0x20) 21:06:23 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xe43) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0xfffffff5) write$cgroup_pid(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x660c, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) [ 424.766885][T13861] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:24 executing program 0: ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x22040, 0x0) 21:06:24 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x5}}}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x4002}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="210100000800030000da00000000000000004cb26e2af4db6fc93311b3b483288c9eb520e7d933ca47c59d724603a8e579d541e282f410b8ba0c211fab56ed40e16e602358643accf609f6ec08e389de93c2cff1ed25bb63d9a958b2eed9793e1212d54299871858545886dacd2a4d991cc243b359d33272209ed19663a0507a10752b46d6cb12bc6b0b308d78f63eb16ecfc2983421e15561a6102e5d4bd4c1b905ac01dabfde8ed110db3c54831085fd69e0e03d55631a378a37ea0d28981efbe419e54e550ce092489496ead66e88f6e2b595f190cbfaeaa3d5e144", @ANYRES32=0x0, @ANYBLOB="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"], 0x24}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x64, r3, 0x508, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x687c73d6dca68968}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "dbd04b33f6ef06ae0e064820cf"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r4, 0x0) r5 = fcntl$dupfd(r1, 0x0, r4) ioctl$VIDIOC_SUBDEV_S_EDID(r5, 0xc0245629, &(0x7f0000000100)={0x0, 0x579b, 0xfffffc00, [], &(0x7f00000000c0)=0x6}) 21:06:24 executing program 4: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x1}]}}, 0x0, 0x26, 0x0, 0x8}, 0x20) 21:06:24 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 425.165971][ T33] audit: type=1400 audit(1584824784.207:67): avc: denied { write } for pid=13874 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 425.266618][T13883] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 425.275103][T13883] team0: Device macvtap0 is up. Set it down before adding it as a team port 21:06:24 executing program 3: pipe(0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x7, 0x0) ioctl$KDGKBLED(r0, 0x4004510d, &(0x7f0000000140)) 21:06:24 executing program 4: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x1}]}}, 0x0, 0x26, 0x0, 0x8}, 0x20) [ 425.430754][T13892] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 425.450548][T13889] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:06:24 executing program 5: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, &(0x7f0000000080)=0x80, 0x800) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, 0x0, 0x0) recvfrom$unix(r0, &(0x7f0000000100)=""/4096, 0x1000, 0x2, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001140)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001180)={0x64, r1, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendto$unix(r0, &(0x7f0000001280)="bd804d70ec1d50ee7f55430ec0def2cfd8ff40ba78c7fff07e46ec96cd41240c1a7dfe77fe79f54a379f753cb4c7604a5b9405627216aece5fdf9f873526eeeb01e1abe0cfb635b0aad9c31c132a668abf65660f00ad387c51660466f2807a0912a9c6db3a44a025e31fd60fc1d995d29a1db6c8da21", 0x76, 0x0, &(0x7f0000001340)=@file={0x0, './file0\x00'}, 0x6e) r2 = gettid() r3 = syz_open_procfs$namespace(r2, &(0x7f00000013c0)='ns/time_for_children\x00') r4 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000001580), 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001640)={0x0, 0xffffffffffffffff, 0x0, 0x27, &(0x7f0000001600)='eth1vboxnet0@ppp0self{proc(wlan0$[ppp1\x00', 0xffffffffffffffff}, 0x30) sendmmsg$unix(r0, &(0x7f00000016c0)=[{&(0x7f0000001400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001540)=[{&(0x7f0000001480)="9a41d383a57ab2da1fc7dc640957f08d584c1b1e62e74093dd7af2568db30bb3d85a11973b083bc5937546f2d311c7155b3a9b64212683709551a61875365c703227e6cec72f3b6c03f87fa316015a24662f018a9fbcc507e1d2877c25918eb1c222932a6e95fe73a2", 0x69}, {&(0x7f0000001500)="09128262", 0x4}], 0x2, &(0x7f0000001680)=[@rights={{0x30, 0x1, 0x1, [r4, r5, r3, 0xffffffffffffffff, r6, r0, r0, r7]}}], 0x30, 0x800}], 0x1, 0x40000) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x60, 0x3, 0x3, 0x801, 0x0, 0x0, {0xc, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x40}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x100}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x7f}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4e}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x8094}, 0x4000000) 21:06:24 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f00000000c0)=0x2, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x80010, r1, 0x10000000) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000001540)=0x0, &(0x7f0000001580)=0x4) sendmsg$can_raw(r1, &(0x7f0000001680)={&(0x7f00000015c0)={0x1d, r3}, 0x10, &(0x7f0000001640)={&(0x7f0000001600)=@can={{0x0, 0x1, 0x0, 0x1}, 0x5, 0x3, 0x0, 0x0, "267b5c38c9ba2cc9"}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x44081) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r4, 0x0) recvmsg$kcm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/32, 0x20}, {&(0x7f0000000340)=""/227, 0xe3}, {&(0x7f0000000140)=""/134, 0x86}, {&(0x7f0000000440)=""/98, 0x62}, {&(0x7f00000004c0)=""/59, 0x3b}], 0x5, &(0x7f0000000540)=""/20, 0x14}, 0x20) [ 425.609141][T13889] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:24 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000000c0)={0x3, 'wg2\x00', {0x7}, 0x1}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000a0a050000000000000000000100000808000740000000300a0003400000002834c99d44de0001408000000108000140000000020800014000000000080001400000000208000140000000010800014000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4004015}, 0x5001) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) fadvise64(r2, 0x6, 0xffffffff, 0x5) 21:06:24 executing program 4: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x1}]}}, 0x0, 0x26, 0x0, 0x8}, 0x20) 21:06:24 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:25 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7, 0x14800) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000000)={0x2, 0x0, [0x1, 0x81, 0x3, 0xd0, 0x49d, 0x3, 0xffff, 0x4]}) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000080)={0x4, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x2) 21:06:25 executing program 3: pipe(&(0x7f00000001c0)) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x7, 0x0) ioctl$KDGKBLED(r0, 0x4004510d, &(0x7f0000000140)) 21:06:25 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0xfca) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) [ 426.158754][T13919] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:06:25 executing program 2: syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x16}}}) [ 426.236234][T13919] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:25 executing program 0: syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x1ff, 0x100) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x80010, r0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x200000, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @raw_data="acd6cdc23fb9ff09b5fb11fd2d9aa23050b98c8518a8d5a53877969c509dc8865c3a551c18bba98f492fa734d70e407e2ac874ea7b6c538652e57b769d6eef1c0a46b7b5fe5f8cc2fea9b75ef182c41456e2943c97fc405783ff87b621e1f4bd8c18519ac52b292ccb554ed2a9eb0e3ffa65d1ba8fc7544f61eafbf8be22b96ea7c09dd0790f3d84164e7f51283b5f2ea5e2d8f400c2f96eb50af2617ddca74d7ba9c3a1a033c3f2138f9c2626e13071b939b38d7b213a5a62b4e32c7b32538a94cce6f4121b189c"}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x1, 0x3d) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7b, &(0x7f00000000c0)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYBLOB="8e0000003482bcdd29886d18b7a83d1ee691e6020567a56d7aa983493412f4c0d4fde5f3c5053cf317f4ac0708acd5dc61396a9c32402ea8711ff63fa845457483b37085582ac600c1f086ba64254f754a58eccc6a08b1ffa116a813155e8c7a3c8cff6914be1dc664dbb2b5b9eef801e80ee511146f5c8fcc651781b28a59ae86cc64959fc0166a2baf4ec2bdc0af970000"], &(0x7f0000000100)=0x96) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000140)={r5, 0xfffffffe}, &(0x7f0000000180)=0x8) 21:06:25 executing program 4: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x1}]}}, &(0x7f0000004600)=""/210, 0x26, 0xd2}, 0x20) 21:06:25 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{0x0}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:25 executing program 3: pipe(&(0x7f00000001c0)) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x7, 0x0) ioctl$KDGKBLED(r0, 0x4004510d, &(0x7f0000000140)) 21:06:25 executing program 2: syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000180)='SMC_PNETID\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0245629, &(0x7f0000000080)={0x0, 0xfffff801, 0xadf, [], &(0x7f0000000040)=0x1}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f00000000c0)={0x3, 0x0, [], {0x0, @reserved}}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x141200, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000001c0)=0xffff) [ 426.860686][T13948] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:06:26 executing program 4: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x1}]}}, &(0x7f0000004600)=""/210, 0x26, 0xd2}, 0x20) 21:06:26 executing program 3: pipe(&(0x7f00000001c0)) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x7, 0x0) ioctl$KDGKBLED(r0, 0x4004510d, &(0x7f0000000140)) [ 427.077536][T13948] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:26 executing program 0: 21:06:26 executing program 2: syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x400000) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)='attr/current\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) move_mount(r2, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x30) getsockopt$sock_buf(r1, 0x1, 0x37, &(0x7f0000000100)=""/131, &(0x7f0000000040)=0x83) ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f00000000c0)={0x6, "b60b126fd900061daf9741448a4fe1cd1504c32708e7e89f1f4cac6ed5313e12", 0x3}) 21:06:26 executing program 4: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x1}]}}, &(0x7f0000004600)=""/210, 0x26, 0xd2}, 0x20) 21:06:26 executing program 5: 21:06:26 executing program 0: 21:06:26 executing program 3: pipe(&(0x7f00000001c0)) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x4004510d, &(0x7f0000000140)) 21:06:26 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @bt={0x0, 0x0, 0x0, 0x3}}}) 21:06:26 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{0x0}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:27 executing program 4: 21:06:27 executing program 0: [ 428.098661][T13985] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:06:27 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000240)={0x8, @output={0x0, 0x0, {0x244, 0x6}, 0x7, 0x9}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x10200, 0x0) write$eventfd(r1, &(0x7f0000000100)=0x400, 0x8) 21:06:27 executing program 3: pipe(&(0x7f00000001c0)) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x4004510d, &(0x7f0000000140)) [ 428.228308][T13985] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:27 executing program 5: 21:06:27 executing program 4: 21:06:27 executing program 0: 21:06:27 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{0x0}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:27 executing program 3: pipe(&(0x7f00000001c0)) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x4004510d, &(0x7f0000000140)) 21:06:27 executing program 5: 21:06:27 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x6, 0x4e0802) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000100)=""/39, &(0x7f0000000140)=0x27) r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000000)) 21:06:27 executing program 4: 21:06:27 executing program 0: [ 428.923127][T14008] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 429.025155][T14008] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:28 executing program 3: pipe(&(0x7f00000001c0)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x7, 0x0) ioctl$KDGKBLED(0xffffffffffffffff, 0x4004510d, &(0x7f0000000140)) 21:06:28 executing program 5: 21:06:28 executing program 4: 21:06:28 executing program 0: 21:06:28 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x7ffffffff000) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x20) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f00000000c0)) 21:06:28 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:28 executing program 5: 21:06:28 executing program 4: 21:06:28 executing program 3: pipe(&(0x7f00000001c0)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x7, 0x0) ioctl$KDGKBLED(0xffffffffffffffff, 0x4004510d, &(0x7f0000000140)) [ 429.638891][T14032] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 429.686261][T14032] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:28 executing program 0: 21:06:28 executing program 2: socket(0x200040000000015, 0x805, 0x0) r0 = socket(0x200040000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x271e, 0x0, &(0x7f000033bffc)) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000000)) 21:06:29 executing program 5: 21:06:29 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:29 executing program 4: 21:06:29 executing program 0: 21:06:29 executing program 3: pipe(&(0x7f00000001c0)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x7, 0x0) ioctl$KDGKBLED(0xffffffffffffffff, 0x4004510d, &(0x7f0000000140)) [ 430.345927][T14051] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:06:29 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x8) syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x5, 0x8a00) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}}}) 21:06:29 executing program 5: [ 430.420363][T14051] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:29 executing program 4: 21:06:29 executing program 0: 21:06:29 executing program 3: pipe(&(0x7f00000001c0)) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x7, 0x0) ioctl$KDGKBLED(r0, 0x4004510d, 0x0) 21:06:29 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000890}, 0x4) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="7df7000000000000000007000000"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, r3, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1065}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}]}, 0x88}}, 0x800) r4 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f0000000000)={0x2, 0x0, [], {0x0, @bt={0x3, 0x4000000, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd0}}}) 21:06:29 executing program 5: 21:06:30 executing program 4: 21:06:30 executing program 0: [ 431.181638][T14075] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:06:30 executing program 5: 21:06:30 executing program 3: pipe(&(0x7f00000001c0)) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x7, 0x0) ioctl$KDGKBLED(r0, 0x4004510d, 0x0) [ 431.257466][T14075] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:30 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a}}}) 21:06:30 executing program 4: 21:06:30 executing program 0: 21:06:30 executing program 5: 21:06:30 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:30 executing program 3: pipe(&(0x7f00000001c0)) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x7, 0x0) ioctl$KDGKBLED(r0, 0x4004510d, 0x0) 21:06:30 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070002053c27bc3376003639405cb4aed12f0000000000ae47a825d868002736460234432479aed75d492b415bcee0f0fc00008e99adaf000000000000000000000000fd6d802d0b290e69758009cb0735fad06b81b8eee59e2efeb55e420e8d18c29b942293b2ce623f47991bd9db11d0d7a44e2c99829e8d1644089d39a38da0675765ee2bb40983d577dcd14aadfce41ce65316be15221a6e496bcb4a4f40abda9f69d070e330ddcd5f14ae9a405fbf", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 21:06:30 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xece4008c, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x24fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3687e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 21:06:31 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {}, 0x4}}}) 21:06:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x7, 0x1, 0x401}, 0x14}}, 0x0) [ 432.136990][T14109] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 432.215750][T14109] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:31 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) connect$inet(r2, &(0x7f0000000400)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 21:06:31 executing program 2: fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000140)) clock_nanosleep(0x6, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000000)={0x2, 0x0, [], {0x0, @reserved}}) socket$pptp(0x18, 0x1, 0x2) 21:06:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) pwrite64(r2, &(0x7f0000000000)="b5", 0x1, 0x0) fcntl$setstatus(r2, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r4 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 21:06:31 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 432.862441][T14135] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:06:31 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe4) fchown(r0, r2, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r4, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000280)={r4}) getpeername$l2tp(r5, &(0x7f00000002c0)={0x2, 0x0, @multicast2}, &(0x7f0000000300)=0x10) [ 432.934775][T14135] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:32 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@local}) 21:06:32 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xece4008c, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x24fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3687e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 21:06:32 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 433.543563][T14155] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 433.578329][T14155] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:34 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x7ff, &(0x7f0000000380)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080fffffffe) 21:06:34 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x6e, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @gre={{0x7, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0) 21:06:34 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f00000000c0)={0xc, {0x2c, 0xff, 0x2, 0x5d}}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) 21:06:34 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 435.188544][T14165] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 435.235729][ T33] audit: type=1804 audit(1584824794.287:68): pid=14170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir454913246/syzkaller.TRbO3z/156/bus" dev="sda1" ino=16991 res=1 21:06:34 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) 21:06:34 executing program 4: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x4000000000003b0, 0x2, &(0x7f00000001c0)={0x77359400}) 21:06:34 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000480)=[{{0x2, 0x1, 0x1}, {0x4, 0x0, 0x1}}, {{0x0, 0x1}, {0x0, 0x0, 0x1}}, {{0x3, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x4, 0x0, 0x1}, {0x1}}, {{0x4, 0x0, 0x1}, {0x4, 0x1}}, {{0x2, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1}}], 0x30) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000050000000900000000000005ffffff7f0a0000000000000c030000000700000000000001000000002f5fe064090dee68a22a50005e0204000000000000088e7bc34cc3357fd322249078dbd8fd1d25bbde3bc5436f20ebff21be3dbfcb72850b68eebc6af30f315e07ebb69539c789c53fce10fd56adc30dddeaf679283963ed643cf7311bc13c0d3849040919da8727c5"], &(0x7f0000000240)=""/137, 0x51, 0x89, 0x1}, 0x20) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000000)) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={r3}, 0x8) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x4800) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000300)={r3, 0x45f}, &(0x7f0000000340)=0x8) r4 = accept4$tipc(r0, &(0x7f0000000380), &(0x7f00000003c0)=0x10, 0x80800) getsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f0000000400), &(0x7f0000000440)=0x4) 21:06:34 executing program 3: sendmmsg(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000280)="dfa8504f0411c209bd62796fd90c9bd6", 0x10}], 0x2}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$alg(r0, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@op={0x18}], 0x18}], 0x146, 0x0) 21:06:34 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 435.837324][T14180] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:35 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000080)) 21:06:35 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 436.013448][ T33] audit: type=1804 audit(1584824795.067:69): pid=14172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir454913246/syzkaller.TRbO3z/156/bus" dev="sda1" ino=16991 res=1 [ 436.040870][ T33] audit: type=1804 audit(1584824795.067:70): pid=14172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir454913246/syzkaller.TRbO3z/156/bus" dev="sda1" ino=16991 res=1 21:06:35 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e23, @loopback}, 0x40, 0x0, 0x0, 0x0, 0xf000, &(0x7f0000000180)='macvlan1\x00', 0x3, 0xdc, 0x8}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) getresgid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) write$P9_RSTATu(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="a00000007d010000007f0000809a0d0000100400000008000000000000000000008000000000ff000000ff7f0000000000000c002f6465762f766964656f230013005b6c6f706f7369785f61636c5f6163636573730c002f6465762f766964656f2300210021737973275d2873656c696e75785b70726f63232b0c002f6465762f766964656f2300000000000000000003000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r6], 0xa0) [ 436.329708][ T33] audit: type=1804 audit(1584824795.147:71): pid=14172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir454913246/syzkaller.TRbO3z/156/bus" dev="sda1" ino=16991 res=1 21:06:35 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x0) readv(r0, &(0x7f000058c000)=[{&(0x7f0000000100)=""/159, 0x9f}], 0x1) dup2(r3, r0) tkill(r1, 0x1000000000016) 21:06:35 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="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", 0x129}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 21:06:35 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000100)={@broadcast, @random="a0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @local}}}}}}, 0x0) 21:06:35 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="6653070001053c07bc3376003639405cb4aed12f00000015db5df948da20646010526600e625d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59601d4b8a6355e5c55368aa1904f1a25958737a63d7da119b71c485fc47f0dacc444cf18e38d2b30dbb21ad459f7df57e91be65c3154ad160c3b3ea8100cbb96a06f8b0dd4cfd90b52ed491d96ad7ec5678f5900c32c2393f1d030000007ab0f26501c03a7c3e1d2104e948cd2ae1cb42fbb1490201f72a1390327ba114af6071764f", 0xd2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 436.480676][T14198] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:35 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x13, r1, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f00000000c0)=0x1, 0x4) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000100)=0x1, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f0000000140)={0x5, 0x7f, 0x58, 0x4, 0x4}) r3 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @bt={0x0, 0x0, 0x1}}}) 21:06:35 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:35 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x0) 21:06:35 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2600cff9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmmsg$inet(r0, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000003640)="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", 0x5b1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001a80)="bc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002280)="dc", 0x1}], 0x1}}], 0x3, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0x22e8}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) 21:06:36 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000480)="6653070002053c27bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee0f0fc00008e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0970fe2b9a77f08add3eac478b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad61421349faf11e9", 0x8b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 437.081900][T14223] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:36 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$TIOCSBRK(r2, 0x5427) syz_open_dev$rtc(&(0x7f00000000c0)='/dev/rtc#\x00', 0x1, 0x200) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000140)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r3, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x541042, 0xc0) ioctl$RTC_IRQP_READ(r4, 0x8004700b, &(0x7f0000000100)) 21:06:36 executing program 0: ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454da, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) dup2(r0, 0xffffffffffffffff) r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;!\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000200)={0x0, 0x800, 0x6, {}, 0x6f0a}) 21:06:36 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:36 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fsetxattr$security_selinux(r0, &(0x7f0000000340)='security.selinux\x00', 0x0, 0x0, 0x3) [ 437.608695][T14247] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:36 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc25c4110, &(0x7f0000000240)={0x101, [[0x5, 0xde8ffd6, 0x80, 0xfffffffb, 0x8, 0x7fffffff, 0x7, 0x10000], [0x5, 0x10001, 0x5, 0x1ff, 0x80000000, 0x1, 0x3, 0x6], [0x5377, 0x1, 0xe8, 0x5, 0xff, 0x5ab3fe0f, 0xfffffffc, 0x8000]], [], [{0x2, 0xb63e, 0x1, 0x0, 0x0, 0x1}, {0xff, 0x4, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x2, 0xffffff81, 0x0, 0x0, 0x1}, {0x4, 0x6, 0x0, 0x0, 0x1}, {0x401, 0x81, 0x1, 0x0, 0x1}, {0x703a, 0x5, 0x1, 0x1}, {0xd9ad, 0x8, 0x1}, {0x5, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x5, 0x5, 0x0, 0x1, 0x0, 0x1}, {0x9, 0xa9d, 0x1, 0x0, 0x0, 0x1}, {0x401, 0x0, 0x1}], [], 0x800}) r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}}) [ 437.646651][ T33] audit: type=1400 audit(1584824796.697:72): avc: denied { mac_admin } for pid=14250 comm="syz-executor.5" capability=33 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 21:06:36 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:36 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 21:06:36 executing program 0: ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454da, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) dup2(r0, 0xffffffffffffffff) r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;!\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000200)={0x0, 0x800, 0x6, {}, 0x6f0a}) [ 438.052103][T14263] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:37 executing program 2: syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x1, 0x8, 0x77b2, 0xffff, 0x10, 0x3, 0x1}, &(0x7f00000000c0)=0x9c) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f00000001c0)={&(0x7f0000000100)=""/165, 0xa5}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x9) 21:06:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) flistxattr(r0, &(0x7f0000000080)=""/55, 0x37) 21:06:37 executing program 0: ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454da, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) dup2(r0, 0xffffffffffffffff) r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;!\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000200)={0x0, 0x800, 0x6, {}, 0x6f0a}) [ 440.113093][ T0] NOHZ: local_softirq_pending 08 21:06:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fsetxattr$security_selinux(r0, &(0x7f0000000340)='security.selinux\x00', 0x0, 0x0, 0x0) 21:06:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="19000000000000001c0012000c00010062726964676500000c0002000800050001000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) 21:06:39 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:39 executing program 2: syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0)='NLBL_CIPSOv4\x00') r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000140)={0x9}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) 21:06:39 executing program 5: r0 = socket$inet(0x2, 0x3, 0xfd) sendto$inet(r0, 0x0, 0x0, 0x4040840, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10) 21:06:39 executing program 0: ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454da, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) dup2(r0, 0xffffffffffffffff) r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;!\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000200)={0x0, 0x800, 0x6, {}, 0x6f0a}) 21:06:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/dev\x00') ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4c5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 440.541684][T14293] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:39 executing program 0: ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454da, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) dup2(r0, 0xffffffffffffffff) memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;!\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000200)={0x0, 0x800, 0x6, {}, 0x6f0a}) 21:06:39 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 21:06:39 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) fcntl$getown(r1, 0x9) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000100)=0x1, 0x4) 21:06:39 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x138, 0x98030000, 0x138, 0x138, 0x220, 0x220, 0x220, 0x220, 0x220, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x46], 0x0, 0x108, 0x138, 0x52020000, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@unspec=@quota={{0x38, 'quota\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 21:06:40 executing program 0: ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454da, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) dup2(r0, 0xffffffffffffffff) memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;!\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000200)={0x0, 0x800, 0x6, {}, 0x6f0a}) 21:06:40 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="6653070001053c07bc3376003639405cb4aed12f00000015db5df948da20646010526600e625d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59601d4b8a6355e5c55368aa1904f1a25958737a63d7da119b71c485fc47f0dacc444cf18e38d2b30dbb21ad459f7df57e91be65c3154ad160c3b3ea8100cbb96a06f8b0dd4cfd90b52ed491", 0x9b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 21:06:40 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0xc4000, 0x0) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000100)={0x6, @capture={0x0, 0x1, {0x6, 0x2}, 0x2, 0x5}}) 21:06:40 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="6653070001053c07bc3376003639405cb4aed12f00000015db5df948da20646010526600e625d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59601d4b8a6355e5c55368aa1904f1a25958737a63d7da119b71c485fc47f0dacc444cf18e38d2b30dbb21ad459f7df57e91be65c3154ad160c3b3ea8100cbb96a06f8b0dd4cfd90b52ed491d96ad7ec5678f5900c32c2393f1d030000007ab0f26501c03a7c3e1d2104e948cd2ae1cb42fbb1490201f72a1390327ba114af6071764f185268dac8650786bc215fe30e91909a321591f55cda9a591e6fc80509aa1bc925423384a1f0bc", 0xf9}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 441.316950][T14320] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:40 executing program 0: ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454da, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000200)={0x0, 0x800, 0x6, {}, 0x6f0a}) 21:06:40 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:40 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x9c, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x0) sendmmsg(r1, 0x0, 0x0, 0xc000) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x5) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x40000, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x8400) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000040)={0x20, 0x2}) 21:06:40 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @bt={0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10}}}) [ 441.804480][T14348] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:40 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:41 executing program 0: ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454da, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000200)={0x0, 0x800, 0x6, {}, 0x6f0a}) 21:06:41 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000100)={0x233674f6eb92cf9b, @output={0x0, 0x1, {0x1, 0x80000001}, 0x4e713c6d, 0x8001}}) 21:06:41 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback, @rand_addr="cdaf2c93faefacf2873596cfb8e26148", 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, r3}) [ 442.218451][T14362] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:41 executing program 0: ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454da, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000200)={0x0, 0x800, 0x6, {}, 0x6f0a}) 21:06:43 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x800000080004103) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) 21:06:43 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 444.449105][T14380] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:43 executing program 5: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 21:06:43 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000000c0)={0x7, 0x1, 0x4, {0x8001, 0x81, 0xfffff9d1, 0x8001}}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001e1c00d18c000000fedbdf25105c6f584c8a0000080003000000000008000300000000000800010002be0e00"], 0x30}, 0x1, 0x0, 0x0, 0x30000000}, 0x20044840) r2 = dup2(r0, r0) syz_open_dev$video4linux(&(0x7f0000000280)='/dev/v4l-subdev#\x00', 0x9, 0x4c581) ioctl$VIDIOC_ENUMSTD(r2, 0xc0405619, &(0x7f0000000100)={0x1, 0x40004, "6610a6795518657e240cd9e0298cfd640734a72d52d3f91d", {0x9, 0x112d}, 0xbd7}) 21:06:43 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000080004103) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'filter\x00', 0x0, 0xffffffff, 0x0, [], 0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x0}, &(0x7f00000001c0)=0x78) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) 21:06:43 executing program 0: ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454da, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000200)={0x0, 0x800, 0x6, {}, 0x6f0a}) 21:06:43 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 444.688598][T14389] IPVS: ftp: loaded support on port[0] = 21 [ 444.868413][T14396] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 445.020465][T14391] IPVS: ftp: loaded support on port[0] = 21 21:06:44 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @empty}}}, 0x9c) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") 21:06:44 executing program 0: ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454da, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000200)={0x0, 0x800, 0x6, {}, 0x6f0a}) [ 445.223834][ T0] NOHZ: local_softirq_pending 08 [ 445.471027][T14389] IPVS: ftp: loaded support on port[0] = 21 21:06:44 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0445609, &(0x7f0000000100)={0x7, 0x1, 0x4, 0x4000, 0x10000, {}, {0x4, 0x0, 0xf8, 0xe, 0x34, 0x20, "71a9e913"}, 0x27, 0x2, @planes=&(0x7f00000000c0)={0x7fffffff, 0x2, @userptr=0x8, 0x100}, 0x0, 0x0, r0}) 21:06:44 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 445.626474][T14405] IPVS: ftp: loaded support on port[0] = 21 [ 445.748917][T12060] tipc: TX() has been purged, node left! 21:06:44 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000200)={0x0, 0x800, 0x6, {}, 0x6f0a}) 21:06:45 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r0, 0x0) r1 = socket(0x10, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) r3 = socket(0x1e, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r4, 0x0) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) mount$fuseblk(&(0x7f0000000240)='/dev/loop0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='fuseblk\x00', 0x1028, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}], [{@fowner_lt={'fowner<', r6}}, {@fsname={'fsname', 0x3d, '/dev/video#\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'net/vlan/vlan1\x00'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfsroot={'smackfsroot'}}]}}) r7 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r8, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r8, 0xc038563c, &(0x7f00000000c0)={0x1, 0x0, {0x6, 0x7f, 0xa2, 0x2}}) fcntl$setflags(r7, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r7, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @reserved}}) faccessat(r8, &(0x7f0000000100)='./file0\x00', 0x107, 0x100) read$alg(r8, &(0x7f0000000140)=""/166, 0xa6) [ 446.042827][T14416] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:46 executing program 4: 21:06:46 executing program 3: 21:06:46 executing program 0: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000200)={0x0, 0x800, 0x6, {}, 0x6f0a}) 21:06:46 executing program 5: 21:06:46 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:46 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x7, 0x1ff, 0xffffe86c, 0x8, 0x0, 0x10001, 0xa91, 0x9, 0x6, 0x4, 0x3, 0x4, 0x23a, 0x4, &(0x7f00000003c0)=""/181, 0x6, 0xaa, 0x4}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @bt={0x0, 0x0, 0x0, 0x1}}}) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000100)={0x26f, 0x2b1, 0x0, 'queue1\x00', 0x7a6}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r3, 0x0) connect(r3, &(0x7f0000000340)=@in6={0xa, 0x4e20, 0x6, @ipv4={[], [], @multicast2}, 0x80000001}, 0x80) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r4, 0x0) ioctl$NBD_SET_SIZE(r4, 0xab02, 0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x4000) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x2, 0x8, 0x201, 0x0, 0x0, {0xc, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xc00}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffff0001}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) [ 447.446484][T14436] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:46 executing program 3: 21:06:46 executing program 5: 21:06:46 executing program 0: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000200)={0x0, 0x800, 0x6, {}, 0x6f0a}) 21:06:46 executing program 2: syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0cc5640, &(0x7f0000000340)={0x9, @win={{0x5, 0x0, 0xb9, 0xffffffff}, 0x9, 0x7fff, &(0x7f00000000c0)={{0x0, 0x2, 0x2}}, 0xfffffff7, &(0x7f0000000240)="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", 0x6}}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffffc}}}}) [ 447.612466][T12060] tipc: TX() has been purged, node left! 21:06:46 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 447.862237][T12060] tipc: TX() has been purged, node left! 21:06:47 executing program 5: [ 448.242407][T14452] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:47 executing program 4: 21:06:47 executing program 3: 21:06:47 executing program 0: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000200)={0x0, 0x800, 0x6, {}, 0x6f0a}) 21:06:47 executing program 2: ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0x80000001) r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) [ 448.436299][ T3571] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len 21:06:47 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:47 executing program 5: 21:06:47 executing program 3: 21:06:47 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000200)={0x0, 0x800, 0x6, {}, 0x6f0a}) 21:06:48 executing program 4: 21:06:48 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, r1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) ioctl$DRM_IOCTL_GET_STATS(r2, 0x807c6406, &(0x7f0000000100)=""/193) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000280)) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0x43621452) 21:06:48 executing program 5: [ 449.100423][T14471] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:48 executing program 3: 21:06:48 executing program 4: 21:06:48 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:48 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, {}, 0xe3}}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f00000000c0)={0x4, @rand_addr=0xfffffffe, 0x4e22, 0x1, 'ovf\x00', 0xa, 0x400, 0x22}, 0x2c) 21:06:48 executing program 5: 21:06:48 executing program 0: syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000200)={0x0, 0x800, 0x6, {}, 0x6f0a}) 21:06:48 executing program 3: [ 449.866077][T14492] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:48 executing program 4: 21:06:49 executing program 0: syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000200)={0x0, 0x800, 0x6, {}, 0x6f0a}) 21:06:49 executing program 5: 21:06:49 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000000)) 21:06:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) 21:06:49 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 21:06:49 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000ec0000867d9ffa796d29f83300ec00000407fd4eb3e097000000000000000a00000500000000000000000000000000000000000000000052f027bb0520b7834e1a49f64422f0ed000000009c0000004b000000000000000004000000000000ed00000000c8000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000300000000000000000000000000006000014000000195c62a104bf449c58748350871b67bbaa02234dd3fac2a8b01cda629afd904599a9b3b81dd0f90cd4a567"], 0x0, 0xe1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 21:06:49 executing program 0: syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000200)={0x0, 0x800, 0x6, {}, 0x6f0a}) 21:06:49 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f00000000c0)={0x80, 0x2d, 0xffff, 0x2, 0x6, "890a57e4851ef1c44d0b5a11cc997b7529f997", 0x80}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xb}}}) [ 450.849331][T14520] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000840)={0x2, 0x0, [{0x9000, 0xbd, &(0x7f00000002c0)=""/189}, {0x0, 0xff, &(0x7f00000003c0)=""/255}]}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000840)) 21:06:50 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, 0x0) 21:06:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f0000004040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000001, 0x0) 21:06:50 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8", 0x17}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000100)) 21:06:50 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) set_thread_area(&(0x7f00000000c0)={0xeee, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1}) 21:06:50 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, 0x0) [ 451.611703][T14557] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) msgsnd(0x0, &(0x7f0000000040)={0x2}, 0x8, 0x0) msgrcv(0x0, &(0x7f0000000240)={0x0, ""/8}, 0x10, 0x2, 0x0) 21:06:50 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x64, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr="66afa3967dd2de441accad7be3dd9d5e"}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_UDP_SPORT={0x6}]}, 0x64}}, 0x0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r3, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'team0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000800}, 0x4080) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) 21:06:50 executing program 5: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)) msgsnd(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="95"], 0x1, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000580)={{0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 21:06:50 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, 0x0) 21:06:51 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8", 0x17}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:51 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @any, 0x3}, 0xe) 21:06:51 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x103100, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000000)) 21:06:51 executing program 4: syz_mount_image$iso9660(&(0x7f0000000140)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@cruft='cruft'}]}) 21:06:51 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000200)={0x0, 0x0, 0x6, {}, 0x6f0a}) 21:06:51 executing program 5: semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000040)=""/234) [ 452.495052][T14583] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0xb4}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x201, 0x0, 0x0, {}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}], {0x14}}, 0x44}}, 0x0) 21:06:51 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x88fe, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) 21:06:51 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8", 0x17}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:51 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) accept4$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x1c, 0x80800) [ 452.883695][T14589] ISOFS: Unable to identify CD-ROM format. 21:06:52 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000200)={0x0, 0x0, 0x0, {}, 0x6f0a}) 21:06:52 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x2010002, 0x0) chdir(&(0x7f0000000400)='./file0\x00') mknod(&(0x7f0000000000)='./bus\x00', 0xffe, 0x0) execve(&(0x7f0000000340)='./bus\x00', 0x0, 0x0) [ 453.124723][T14589] ISOFS: Unable to identify CD-ROM format. 21:06:52 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) socket$inet(0x2, 0x3, 0x29) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000001d00)=[{0x0, 0x0, 0x0}], 0x1, 0x0) getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r5}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 21:06:52 executing program 4: syz_mount_image$iso9660(&(0x7f0000000140)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@cruft='cruft'}]}) [ 453.279462][T14612] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:52 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea", 0x23}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:52 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000200)) 21:06:52 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x12001}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r6, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000002f00)={@any, 0x7f, 0x1, 0x1}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r7, 0x0) accept4$packet(r7, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000002ec0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002e80)={&(0x7f0000000380)=@newchain={0x2af4, 0x64, 0x4, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xe, 0xf}, {0x10, 0x10}, {0xfff1, 0x9}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x2aac, 0x2, [@TCA_CGROUP_ACT={0x1528, 0x1, [@m_ct={0xf4, 0x20, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x88, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "579842204938eefc9274de14370343ca"}, @TCA_CT_PARMS={0x18, 0x1, {0x4, 0x8, 0x20000000, 0x0, 0xa54e}}, @TCA_CT_LABELS={0x14, 0x7, "1ae49d14bb0c2c996c60aafe42f3b808"}, @TCA_CT_PARMS={0x18, 0x1, {0x2, 0xfffffff8, 0x6, 0x8, 0x3}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast1}, @TCA_CT_PARMS={0x18, 0x1, {0x3, 0x0, 0x6, 0x5, 0x6}}]}, {0x5f, 0x6, "eb6733eb8ba579952084074eec8c80d9df0ad442551a344082c178060d1100797f708b15cb64d36d4209a64549718a1bab581b7502e81d91e210521b40efd80352b1de4ccf2f342845d87cfad41eac3bd5444ed09e55475f1180ee"}}}, @m_tunnel_key={0x58, 0x15, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}]}, {0x38, 0x6, "b2f0ee258941c7342bcd60553910785df5462044812538421cb3b4c6b7c93815c7c364d1ff0a019d6ed1f8896e4f2dfa400328ea"}}}, @m_vlan={0xf0, 0xd, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x87e}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x772}]}, {0xc9, 0x6, "795b2bb9d7616b2cadb172040758d9a95e9921009a34398aedea26e53652925fbb519cf7cfe924c132cf76d7bab6169f0bfd036d8a5222ef27cb85faf17a9a148c04d7a36d4b58d31f52943dc48b08a1624a87ab68378b8a7dd083cf23f5154bbd78b301af8bccf061672c002b459ee882ab4112e34ed7fe1184b00000982756e41371de837fa0092c59bf638a64df6950ac42bd5e20b281326fee982b895d88d8fb2d023f85e5a3bc9b88faa69c3d1652c8326d99818b066791a3b7ee060724a935d9e827"}}}, @m_connmark={0xc0, 0x1a, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10001, 0xfffffffc, 0x2, 0x1, 0x3}, 0x101}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x12e3, 0x1, 0x4, 0x3, 0xa7}, 0x9d}}]}, {0x6d, 0x6, "4ff864d2f80fc39736a86f1151362f74775ec8903c49cec074c32fdfa6ff75c8cc6de231de4c9353fb190b476f9b0569304da3b200babc87cbe9ab9653e54908cf2dcd214bece596b3dc5e24175492cda3319b516bde9eeb948388eb93788a732825d632685626ea9d"}}}, @m_skbedit={0x110, 0x1c, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0xe}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x10001, 0x5, 0xffffffffffffffff, 0x8, 0x4}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x401, 0x8, 0x3, 0x7, 0x5}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}]}, {0xa4, 0x6, "fd93e0cd2a49f2a25ed4a7703b56b822c3e942eecce420a77bbb4dca20462103996e857be9d8416a94712f7b32adc968a8409151e0632e40ce3061dac81139563b99ac5030dfb5b9cfa0d838e389897b81bf4882143bcfdd09761535146094ea25041d2c676dfad0f1046ffd43e22ad0c8015bd6dad0bd9913b0b7760fe3699a0184762d106d616b3e3e023283887696af2855587df17097f6047a1ff96e83a2"}}}, @m_simple={0x1030, 0x18, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x8001, 0x7fffffff, 0x5, 0x8001, 0x80000000}}]}, {0x1004, 0x6, "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"}}}, @m_gact={0xe8, 0xe, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x5e9, 0x3, 0x20000000, 0x1ff, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8001, 0x5, 0x3, 0x8000, 0x7}}]}, {0xa2, 0x6, "266a3f9260e1a316e8b4e1025c8faec27987a57e0d3304cd596be0393cc02e9f0bf5b7261ea2b5d899fc1e01e7f615f1d8b5f8b8a6c3b62759db2a0e9878faa6b6bd49f2e6cc986a09dbab8633881ad1f7f2840935aa178571ad761534bd5c8017f633c78eb086eab755cd7116e420a2228ebcbcdb87116736e53c7812d5ac3c707e9b55f02fae5a9bf3c69aa3a68928f97f549e79bd47080abc83b45dc3"}}}]}, @TCA_CGROUP_EMATCHES={0x138, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x2, 0x1, 0x6}, {0x7, 0x20, 0x4, 0x5, 0xa, 0x1, 0x2}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x6, 0x1, 0x20}, {0x1, 0x4, 0x1, 0x1, 0x3, 0x2, 0x2}}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x2, 0x407}, {0x7, 0x8, 0x0, "76982223077fc99b"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7f, 0x7, 0xc8}, {{0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1000}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}, @TCA_EMATCH_TREE_LIST={0xac, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x90, 0x2, 0x0, 0x0, {{0x1, 0x9, 0x3}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x20}, @TCA_EM_IPT_MATCH_DATA={0x46, 0x5, "152246956524cafa5f7c60ddda556f48d50b08d6f40b46c6aae48ab780a39705d45b0fc34be914c7eac7f416d7fcb9cf2d5aab547f4780d526e1789fe51a5f342466"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb, 0x2, 'policy\x00'}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5}]}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0xf45, 0x2, 0x9}, {0x1f, 0x3, 0x1, 'xSV'}}}]}]}, @TCA_CGROUP_POLICE={0x70, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000001}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1ff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x8, 0x8000, 0x6, 0x5, {0x5, 0x0, 0xfffd, 0x9, 0x90ce, 0x40}, {0x2, 0x0, 0x7ff, 0x1, 0x2, 0x8}, 0x4, 0x5620, 0x1f}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}]}, @TCA_CGROUP_ACT={0x10cc, 0x1, [@m_vlan={0x1060, 0x9, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x4c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x2, 0x0, 0x19b6, 0x3}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffffc01, 0x80000001, 0x8, 0x9, 0xb4bc}, 0x1}}]}, {0x1004, 0x6, "daeba1b25be6e4ee6d237057cd13212ad469cc3e4c358bdcb02355d23a8d9ada5414079fc6be2827c7b5ac9e38d17044c0392fb670a64a00b2b078499940a5eaed665091eb11b0c803f17bc61e737225d59db9d59081939484c5f8eb085d6d3f77a1b1eb4171beb0ecf4804ff53583f534d964299e56ac003b2c59b6efdaeeeff9aa0de5ec56714e2c83a7e1181fff179a6718b6493c5acb159f39cb318e2b8f54d6d846a2a463e56fdda974b0e4c7a3c04f43c8cd998c882ea856f6d2f34773b49412dc01ef78cb38ba4a93e2101653d3342715d509426a1d63189c091780c6e5ab6feddc334d556e7aa4d2b4225472acf040c2ccdbfbde79a9580bcb559b9dd3857e0c9cd8bec301d51847f90689924cef01d2f8bccf3a5340e9dd1e74c870679377dd61d80baca6e1d79718dd8f9505716a50ee6eb3234402469bbee0130786a660dea291145d2ac926aac1ec976e4d07925bf2bccb4463b7ac027932586458f1c6e7e2a3972280ae84efca4af60da1dea830fa4d5b731b2dfd98cf771dc87bcc820841ae2fa876aa7d38499ccdcaeb025d611f1a8f9f593167ea59c18138598b3e60e5ff2fd9c8c81bbde10085915a9c153bfc6d82d6691049e83629b5a37a584f6fef6e99265ed101353b8d72edb2490a86edb62dfd51444b971574932f36c3fe572c1c7e3acd0f362ffd221346eacf1e28a5d8a467494aaa36111ec561d15627973932c30ecf4cb150f3c1a952d4591826b05c07a119887162b3684e063abf2d043f07ca6f06053438731d645d0858b6dbfe5c9c31d1321524c5aa11e0f0aede12266570d144b64939a9266f4704a608da84e04df27dc7e68ac67c06725aefb9ed41d6ab3967d30e79159a5d2dce252f121d6d804846d580bf7d65254a22a97e6fef22742329c7cb356a40bcde02ab83f2af8bafe158eef31679ee86bb313c944973cfe29291d4f7865dcce757d51261cfe27893b39fc1b3241a4e40fc320c8856acbb1d6fcae9603e1db91fea7ddf81eec59c6fd452b887f0102a7c6c97bf2ff6dd5e045a81f92663b6158b2e974f7a479486e894da07db67be28b1671dc216c1cc09bd1345f3be5a1ad8c186b0151ff430c6bbf2b6264384443a345ee7e6361a162928405c631c5372cabc213b62d5020d8172e8d21fa23e50f3e349097745920e4cb20bac7504c947191cbed13171aaed2144ea7b9cc2148f44c342cc83b3a4b243a34fc8960ee0904f0e53615bc1b2aa1111fe7950b12dedde0ac5c0450391ea281a272a1d6d999c0cfb2bbc8df96cdda246b925706389167d47428562892583c3e8daaa7e99b503105dd4c3c39886053e1345493dd671b9b63040489cfa4372799a136124b07e6f115ce1dbdb3d82a4082e399cc8812fb53b829bb7ffe8c39df444e57fd0f1d18dddf5686ff5214e116cfe5d8be9e38025374de5bad6af5f46c360b05cf5c4bc6843b90c0432fd122e4fdf26248edbf584d07c3cde00840e63c9ec1ac3b85b7e11b728e7a8f16d23d044267a84a7fa31c806f9f2e539b9021f8bbc40f7094e9f60643acd1928a0eb6ab3b3fc5556ac15e80c7bee15f8c8abddb12f13362cedb5d63897989ce5a96301bae5bdd839f8c149de5649138e5f01b974801804ae89244a513b131d762101ed875aec593f423343aeedebd99a9f20d24d738a706fa90daf85c44ce88d3d0e06d1b666a191085f310a82b7c37db1da5cb0777b1858b6ec0b17e4ff6577ae17b1f3c1e1e9e2e32ee4945c7f8b5a4b2ca5182b580067feec70711a84463af2974f4dd69cd372e76abf139926a4033f941df3ff8f328370414c0c8e22f81ba591d7d976ff711019df0ba840ec188d88aace4cbfaa1084cdf9afa3baf91b60ee4aaad29e3fd24ba96ba98e24c0a7d7e84a82d49ea873ab0ab147543491415f814d88081f9647d2700cc712cc578f2fe96df428c6f8ef14b1c6eeaa932b0334edf87199a3e63979b131ef0b977e7fd3ffc08c2afa4120f48d6a8c050091abe9916d832c5d5337a6ecda182e9b448a6309304da09206625d09894d606dbe1d4a458d421638ee263283385273c891cf9b32f052a9217efdaf7199af405ee413852f5ceb6daff1ccca86a4ca16dca44469089940cc1bebff567c803adfc0180c85c628cfebd250c864f11469b7b49fe7d060755b3827811b6c28ea7b1de85cea3c8a45d3313949cd08f429f87d4cd7bff25f180a72edd824228e88f0688a1cc755102db2fd855b7392b48334323e72f803238c3eeeb71d0fc31c36499ef693b6c825f9b781322a91562c30e99439ee67f0bec811e9b97c8c0b8fd850811fd0898c4218bdd44feb87ca0936966ae7712c874350c25eb3679f95f8c3e917f23f70ecf6cf04b2a47fe81b26557086f7e5cb64ebb1f9406c545c85454d3e52fbb46c2b4e73e3019ce75d0e73f296c84e82b7e5f5233e722a6e1b13e85a71e90b657678ff34aa3767f9b8f571ba77058971727386e9d06b85b39f56eed1f6062af91b666bf6209bb8742b4189c02e28cb99b3aba59976437543bf7172a09a2e049d2c24df6647129ec91224cc5af4fed5acd99c16e6f54aad52a284f50040dc7cb24e6d0a110bcc53d6bb0751731d4ce815761282b546dd5586c3727e24f54eb685adea9b73d9158b8b90f62edc4ae2c59b97f55d43edb61164ad0198793d78b7310a0c8296a288e82b8ca6eb9b80916d385d123610647c7f5f7054c3b9d9516302d21bd1ed22609d86b24801a1520dd79a16593779a4a35a172bf3cd6daaa51739454db273b919d7b427cc910d600aaa8be45698429caaf98bfb0fd4629c29f351b6a4de67bce25864e7cd45d76508688b3875398b5ea57887ee4560fec07896355a03e00a152dbfbc598c3006ff914ab55c2496b996b3a11ad235cbd6209be6e8e4f838e7b0ae329c7543a9c41463bfd3395f14311068909c7984bd7b9a52e3e83108f80254a43b791c2828bf171d80c11b57074bdd26b8522d37878b53dd64f49a3d3b51a0182d1debb487e8dca9ed9d560d60f7ab0096a6f8b8e0aaf9323eafd7213a307526ffde6da12b90f7894f76246a248d0890610c4e1b2fdb040aad358d6d3fe90eead7f2f124d7f8eb18c45c06f6a710dcda7ead4ace7e4a3f48a18d623c52eefad6cdec6e5723b601e4937e290415c45c739563c0b7a5e28e7fdb3418266e5616eb95805605456bcd839b20d9f9f5a0c5704af8f9df912eef5847d9772f453d3e032460a3149bd184b75e619a46b5da4a82821b429ed96e59fb46b7e0aa9879ba339aff294627619e6e1e9dced91c775ada1d4db05d9e1bae20c8364c3893bf6877624992ea3f358024c4555bb8f2c96ed957dbcf0af91ec541169c28874e28e6969be494b7f7b6b41e7718a040d6b295155bed8f5d552116e0471ac23574a80949c9a9cac412d5a9cedf184cee08307b2378a16262a26c6c743c9ee42f7b30595c661c149f8e4d28ec202347102385c664709a647049cc46a29e7147a269802668650ea379aac92d04e43983c0803fa50b3b7aee07d0612eb8159d8bab9ab84d459e220aab522573fbb739464f37d3d2954b05d51abf1fbd31866d3baae7180163f6fc40fb81e33cc6f25e32aea8e9e0991a4f54708245769bf0a3ae4cba6ef32136aae8d4ab3a7903862a0d79ed3424b4be960ffda9c48b92c0d542ac40d85ab23e041bf535042317ab00ac85c3f264e1ff508ef3e900ad175a1f593cc307f72d96b167ff11f8af10f673c0be40e5db88b06e195f8e17529a075b10d9288761c7b2d13139226984d6b4807ad76785119ae6422e8740ad288cb7112144f15cd5b79c94ca8a22b989ed3558f6eb7a595712af94539c2be12b8ce1bb618362c39ef4815c4feb5826763440f47fa8991480bd0f5dc68423a4fc6cb4bb5abdf1f565a5eaa81c1997c7ea7e2f3a07b038a348ae52ec3d39865630203145a7863845bdaa883c2aac13aa38818d8d63e2bbc4f27f1041cbbf46c02cdd54559a849da3bfae8589a7782784290a1a1aa8c41117e28985f7618db639ba54379f507ccf0320b935159c5569764726b399cf384d0649a4ab38e4ac24245c6bf02330f1c301f58841a3652ac46db70c79f4650e160d8a7a49d84f416e6bf4f5c8d61e5838fa187687d9b441c12d867138d6352c5182617e14622fcf54d08a4d0d00b80d96cffd73e3782d6ebdc0d2ece213ca130d5f362d926c9fc3a9e8faa0895ddf441460eff2f7434b4b53df00a2a581fb3835f7d9fae111b9a40d6f07bd4f0229f450a25e4a66d922d95acd73db8400aa63ed6c18de474c0bbe85043c261d136a83e09200afca678bcc86ae4350447855ca0cfea92e45edad7478594cd6f3d52fcd62e12c588eb4ba768873c51016d7161ac443aefa29739077d9563d3fa7a6c6427d5e5d80ab8fa2b4b32935728d7eee874fa2996bbf0a305b7427a7ce94ee43b6504f6940a1eb34659060eb4fca23d2d8daa39a10d89614e8703b09a8b028411f7d0a2ec12431adfb7ce76f7b20d5500b8d5cafd70d97d75d054cc046467b827605ab35a082305865d378e8354eb9857c00fbb1fdc4726b166e6ad82c0b3b508d1b058dcddefa6cb1bc58f9f0134a1c1f29efe8a06010a3d962a67908feb55b23bf96be8bcc134adb0d9246bb3dc9da9179613c448d95616287825a2beda5449cc0c223b57211d72e770ff2717f13fee4dc37a5af431e04b6aeb13b240ca6fcb78dabf22b8a94d8069aee8e8cca727dc9e1e39e3bb55539de1a85e07acc719407102ae899a3458d283fc4d56c7aaf56ffe6c50caf6ce9c8290ae44a66b7350526cd0d4c22a7e9b64306aca9355cf8d0ff7b43cf7a816cab7a26bc3e3fa564a76f7c9a5220997f0e3c6c994524c358ec52365f93b4b885bf6334363ca71a70511f0fad16e4eda9ec41d44d7373e015b3d07c4e50e0d966dd7d8930e4d8587eaa487df584f2a12a9c308326775120714a669aa57fd6a62d3cda1cb04ec1c731a254194266707a15526407e917b2de33e2aca52114d3eefbe39fac97e053bbf5d7716077d51fbcba041e22596e3c3eb7b952fbf7efb62112d5801672af7bcf5e571245cc2a9cf38f695795af54e0a607de31af66a5d43c4438e675a1abde8ff466cd6b3f2e0515d72e93ac8d61647a77d5827329082fe5ae04132d7bebf27fe4323692e675d717f8b54fd84e358fdf0dff1225763b920f555d2f9d52829c0a8cc533e0a89b5d2e3be234eeeccd5517bb7f6cb22a957b942af7e892aad9edca8a9b69b193e03e435a3a738d6aa8ca2508f8a1c2a918d5ee1d0560697b1b086124cc041fe68ef1cc0dcc6dde7580aefc2a5784ec18055c89b5130c6b8dcf27796190c871c967a3085328b9c28b2b6e97173d30b1c9197308527357b0c7305d2e61a9e857dbc197034761b71795cd2e0c4171d76c11759a9127d17389fa867a788e44d45889c4ceb18dc391d91063c3c6ec7d81022e6d8bad9669ccfd0fb75296012b9ec86df272e787204678bb5de9a76985e02fa884bb9a7739b51506b84e0abf13954596de7b41bcdc7c221fed6a057ec80f6e3795b8f51bae640113724135dcc58cbd17a1c626e85bf81e2bdf4d0e8855a7177ee451b2671afdb9ce6699c7acc290969bc438c1215337ac6716539c208a812fbd434c270c844457d8d160ff2b2fc5ae0fcbc0bea5600c0d12b1780032234847ef610f5d7787f22a1db42513a39ad31e3f399fdc98f17fa6b1b1938066b4c727047d1f29c7b65defff3246dfe8374dddc7ad061df49347a4233a1073e1"}}}, @m_ife={0x68, 0x12, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_IFE_SMAC={0xa, 0x4, @dev={[], 0x36}}, @TCA_IFE_TYPE={0x6, 0x5, 0xffda}, @TCA_IFE_DMAC={0xa, 0x3, @random="14c2968579ae"}]}, {0x2a, 0x6, "cdde590e18de7fdae65805c740769f965c0f8442f705c3120f8c354d008d163df3eed29abdc8"}}}]}, @TCA_CGROUP_EMATCHES={0x30c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x19c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x88, 0x3, 0x0, 0x0, {{0x9, 0x4, 0x6}, [@TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_VAR="e6", @TCF_META_TYPE_VAR="e1fbc68a", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR]}, @TCA_EM_META_RVALUE={0x27, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="fe3d543beaa1da151c", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="8f4b40ab75def772cce0", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0x30, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="343fe6500cc59987", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1}, {0x1, 0xed, 0x2}}}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xb1, 0x1, 0x2}, {0x5, 0xd4, 0x8, 0x4, 0x3, 0x1, 0x1}}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x2, 0x6}, {0x7, 0xa, 0x2, "fd5d8a76f4425d7006ce"}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3516, 0x3, 0x9}, {0x0, 0x0, 0x6, 0x3ff}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x800, 0x3, 0x7}, {0x1, 0x2, 0x9, 0x9d3f}}}, @TCF_EM_IPT={0x1c, 0x2, 0x0, 0x0, {{0x8, 0x9, 0x200}, [@TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8000, 0x3, 0x7}, {0x0, 0x0, 0x8001, 0x6}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x0, 0x7, 0x4}, {{0x2, 0x0, 0x0, 0x1}, {0x3}}}}, @TCF_EM_IPT={0x58, 0x1, 0x0, 0x0, {{0x7f, 0x9, 0x5}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x23, 0x5, "17b19ba87f5e58bbbb279141afbd34ad1e319a1a54c306cf5de0f32cc87f76"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x91}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7fff}}, @TCA_EMATCH_TREE_LIST={0x15c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x0, 0x7, 0x200}, {{0x4, 0x1, 0x1}, {0x4, 0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x3ff}, {0x1, 0x0, 0x3}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8, 0x3, 0x400}, {0xc91, 0x101, 0xfff}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7a4, 0x2, 0x3}, {0x4, 0x1, 0x0, '8'}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x7f, 0x1, 0x3}, {0x9, 0xfffffffb, 0x8, 0x0, 0x8, 0x1, 0x1}}}, @TCF_EM_CONTAINER={0xc4, 0x1, 0x0, 0x0, {{0x1, 0x0, 0x5}, "d372603c8d09acccce7a759761b3dd4d468bf5867510e9e1026c590f73c52198fbecfc5a07d32ec23350abc360fb463f1019b67ab2fcd6e629be7981eb147d3921b1ea8b4c52da93f528dc82ace6b9cf333deef4fbeb4f2f5ea2490f10680f8a69aeb26e95a2fa1313f39402acbb4dfaf3648ef0a82a4d380c4b8f393dd8974a63d31e3933d393ccbdddd881b2ff7d580f9c8bddcc8a042c045c874e24ac31a25f9012d55c7c4bba7880483ce2ab61c2ccac041d29b4"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xb, 0x1, 0x4b6}, {0xffffff01, 0x8000, 0x0, 0x5, 0x9, 0x2, 0x1}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x4, 0x8, 0xa00}, {0x1, 0x6, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x8, 0x80}}]}, 0x2af4}, 0x1, 0x0, 0x0, 0x4c8d1}, 0x4081) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000011000d0400"/20, @ANYRES32=r5, @ANYBLOB="0000ecffefecd3e2ffff04285600ebff"], 0x28}}, 0x0) connect$packet(r1, &(0x7f00000000c0)={0x11, 0x18, r5, 0x1, 0x5, 0x6, @random='FUSSY0'}, 0x14) [ 453.835069][T14631] ISOFS: Unable to identify CD-ROM format. [ 453.893195][T14627] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 453.970598][T14627] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 21:06:53 executing program 4: syz_mount_image$iso9660(&(0x7f0000000140)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@cruft='cruft'}]}) [ 454.072384][T14627] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 21:06:53 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000480)="6653070002053c27bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee0f0fc00008e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0970fe2b9a77f08add3eac478b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa533", 0x7f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 21:06:53 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1100082) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet(0x2, 0x3, 0x10) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r0, &(0x7f00000000c0)='v', 0x1) 21:06:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002a40)={[{@utf8no='utf8=0'}]}) [ 454.569293][T14653] ISOFS: Unable to identify CD-ROM format. [ 454.753268][T14643] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 454.781041][T14641] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:53 executing program 4: syz_mount_image$iso9660(&(0x7f0000000140)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@cruft='cruft'}]}) [ 454.825343][T14670] FAT-fs (loop5): bogus number of reserved sectors [ 454.833682][T14670] FAT-fs (loop5): Can't find a valid FAT filesystem [ 454.884598][T14650] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 454.898244][T14647] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 454.925989][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 454.943295][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 454.951134][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 21:06:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea", 0x23}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:54 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0x0) 21:06:54 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20002, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fc000000090000003c0003800800010001000000140002006970766c616e30000000000000000000080003000000050014000600ff050000000000000000000000000001"], 0x50}}, 0x0) [ 455.449673][T14680] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:54 executing program 2: r0 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x9, 0x2000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000180)={0x13, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r3, 0x0) r4 = fspick(r3, &(0x7f0000000200)='./file0\x00', 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r5, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0185648, &(0x7f00000014c0)={0xa00000, 0x7fff, 0x10000, r6, 0x0, &(0x7f0000001480)={0x9d0901, 0x8, [], @value64=0x5}}) ioctl$FICLONE(r4, 0x40049409, r5) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r7, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001600)=[{&(0x7f0000001500)=""/218, 0xda}], 0x1) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r7, 0x800c6613, &(0x7f0000001440)=@v1={0x0, @aes128, 0x4, "719e822faee39069"}) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000440)={[0xfffffffa, 0x100, 0x3f, 0x9, 0x6, 0x4d96, 0x1, 0x0, 0x10001, 0x20, 0x7fff, 0x4, 0x1, 0x1, 0x100, 0x7fffffff, 0x6, 0x2, 0x80, 0x81, 0x4000, 0x81, 0x0, 0x63, 0x1, 0x2, 0x7, 0x6b9, 0x8, 0xff, 0x9, 0x10001, 0x3ff, 0x0, 0x2, 0x7, 0x3c0, 0x80000001, 0x10001, 0x6, 0x40a5, 0x1f, 0x80000000, 0x81, 0xe26, 0x5, 0x6, 0x9, 0x80c, 0x8001, 0xfffffeff, 0x2e6, 0xda2, 0x401, 0x800, 0x0, 0x1, 0x0, 0x80000000, 0x7fff, 0x9, 0x8001, 0x2, 0x0, 0x401, 0x10a9, 0x5, 0x6456, 0x3, 0x0, 0x400, 0x5, 0x2, 0x1, 0x3, 0x5, 0x7, 0x2, 0x71eb, 0x400, 0xcb, 0xbb4c, 0x3, 0x0, 0x1, 0x6, 0x59bf, 0x7f, 0x5, 0xf0, 0x1ff, 0x3, 0x1, 0xf69, 0x1, 0x10001, 0xfffffffa, 0x81, 0x5, 0x401, 0x75, 0x3, 0x10001, 0x7, 0x9, 0x3, 0x8fdc, 0x9, 0x6, 0x80000000, 0x7fff, 0xffff, 0xa6a, 0x6, 0x6, 0x800, 0x2, 0x101, 0x43, 0x3, 0x9, 0x32, 0xd37, 0x8001, 0x1ff, 0x8001, 0x80000001, 0x6, 0x7ff, 0x0, 0x4, 0x6, 0xd2, 0xfff, 0x5, 0x3ff, 0x4, 0x88, 0x1, 0x9, 0x2, 0xfff, 0x0, 0x6, 0x9, 0x5, 0xfff, 0x9, 0x0, 0xffffffff, 0x7, 0xc9, 0x4, 0x5, 0x101, 0x4, 0x6, 0x68, 0x6, 0x800, 0x8, 0xab, 0x8001, 0x10000, 0x1, 0x81, 0x4, 0x8c, 0x1, 0x6, 0x7fffffff, 0x8001, 0x9, 0x3, 0x80000000, 0x2, 0x7fff, 0xfffffffd, 0xfff00000, 0xffffff7f, 0x8, 0x6, 0x10000, 0x0, 0xfff, 0xff, 0x34, 0x6, 0xa26a, 0xaa, 0x8000, 0xffffffff, 0x7, 0xef0e, 0x400, 0xfff, 0x8, 0x5, 0x1, 0x3f, 0x5, 0x9, 0x2, 0x8, 0x394, 0xd4ce, 0x8, 0x10000, 0x2, 0x8, 0x2, 0xffff, 0x8, 0x9, 0x20, 0x40, 0x6, 0x4, 0xb8e, 0x0, 0x4, 0x400, 0x2400000, 0x101, 0x1000, 0x1, 0x1, 0xfffffff8, 0x8000, 0x7, 0x5, 0x10000, 0x1, 0xe20e, 0x4, 0x1ff, 0x5, 0x7ff, 0xfffffffb, 0x80, 0x81, 0x1, 0x10001, 0x101, 0x401, 0x1e05, 0x5, 0xf548, 0xfffffffc, 0x3ff, 0x9, 0x2, 0x9, 0x9443, 0xe5, 0x101, 0x92a8, 0x81, 0xb0000, 0xffffffff, 0x5, 0x3f, 0x3, 0xffffffff, 0x6, 0x7f, 0x3ff, 0x2, 0x1, 0x0, 0x1f, 0x1, 0x185, 0x101, 0x6, 0x8, 0x3, 0x1, 0x9, 0x9, 0xffffff9b, 0x3, 0x81, 0xffffffff, 0x9, 0x40800, 0xfffffffc, 0xffff, 0x7f, 0x2, 0x20000, 0x329, 0x8000, 0x9, 0xb8, 0xd80, 0x1ff, 0x3ff, 0x1, 0x3, 0x401, 0x2, 0x1f, 0x3, 0xcb, 0xffffff00, 0x0, 0x7, 0x4, 0x1f96, 0x1, 0xdec, 0x100, 0x80, 0x0, 0xea2, 0x5, 0x7, 0x1, 0xffff, 0x6, 0x7, 0x6, 0x1, 0x5, 0x6, 0xfff, 0x1, 0x3f, 0x1, 0x0, 0x1000, 0x100, 0x800, 0xfffffffc, 0x50e9, 0x81, 0x8001, 0xfffffff9, 0x200, 0x2, 0x0, 0x5, 0x1, 0x0, 0xbe6, 0x1, 0x3ff, 0x8, 0x101, 0x3f, 0x5, 0x9, 0x1, 0x81, 0xb31a, 0x3, 0x10000, 0x747, 0x9, 0x3, 0x8, 0x40, 0x100, 0x6, 0xfffffeff, 0x5, 0x3, 0xfffffffe, 0xe6ac, 0xff, 0x80000001, 0x193, 0x5, 0x7, 0x1d17, 0xa771, 0xfff, 0x1, 0xb13b, 0x803, 0x1d, 0xd1, 0x7, 0x20, 0x7255, 0x2d5a, 0x2b2f, 0x1000, 0x3, 0x6, 0xffffffff, 0x8001, 0x4, 0x10001, 0x9, 0xe768, 0x7f, 0x4d89, 0x2, 0x2, 0x101, 0x6, 0xab3, 0x8, 0x8, 0xffff8000, 0x6, 0x0, 0x0, 0x1ff, 0xfffffe00, 0x988, 0x3, 0x1ff, 0x3, 0x5a11, 0x2, 0xffffffff, 0x2, 0x57893721, 0xed, 0x1ff, 0xfda, 0x2043, 0xc61f, 0x6, 0x37b7cd2f, 0x7, 0x20, 0xfffffff7, 0x3, 0xc8, 0xfff, 0x200, 0x1f, 0x3ff, 0x4, 0x4, 0x1ff, 0x7ff, 0x400, 0xc97, 0x4, 0x79, 0x80000001, 0x5, 0x6, 0x7ff, 0x1, 0xa1e2, 0x3, 0x2ed, 0x2, 0x8, 0xfffffffc, 0x6, 0x2, 0x40, 0x5, 0x40, 0x20, 0x7ff, 0x4, 0x0, 0x100, 0x6, 0x4, 0x0, 0xe4a, 0x2, 0x1000, 0x3, 0x9, 0x0, 0x6, 0x40, 0x23, 0x4, 0xef, 0x2, 0x2, 0x9, 0x8, 0x401, 0x3, 0x0, 0xffff0000, 0xffff, 0xfffffff8, 0x7, 0x3, 0x10000, 0x2, 0x7, 0x6, 0x9, 0xfff, 0xaf16, 0x1, 0x1, 0x1ff, 0xffffffff, 0x2, 0x8, 0x3ff, 0x3, 0x80, 0x7, 0x9, 0x3, 0x7fff, 0x5, 0x7, 0x2, 0x2, 0x1000, 0xfffffff7, 0x5, 0x3, 0xff, 0x0, 0x1, 0xcc, 0x2, 0xb338, 0x401, 0x1f, 0xf1, 0xffff, 0x2, 0x400, 0xfffff40e, 0x100, 0x20, 0x1, 0x299d, 0x2, 0xb8, 0x100, 0xf67, 0x6b4, 0x0, 0x0, 0x5, 0x4, 0x1, 0xfffffffe, 0x10000, 0x0, 0x7, 0x8, 0x10001, 0x69c, 0x800, 0x7, 0x5, 0x4, 0x7fffffff, 0xc4a5, 0x6, 0x200, 0x9, 0x7ff, 0x7ff, 0x2, 0x8, 0x1, 0x400, 0x4, 0x5, 0x8001, 0xd6, 0x9, 0x401, 0x80000000, 0x4009, 0x7, 0x0, 0x9, 0x8, 0x6, 0x3, 0x4, 0x80000001, 0xf0, 0x6000000, 0x400, 0x2, 0x3, 0x7, 0x1, 0x6, 0x100000, 0x5, 0x5, 0x4685, 0x1, 0x100, 0x8040, 0x1, 0x1b, 0x101, 0x7, 0x6, 0x41, 0x6, 0xa5c6, 0x10000, 0x8, 0x2, 0xc6, 0x7fff, 0x9, 0x100, 0x1, 0x2, 0x40, 0x1, 0x10000, 0x5, 0x3, 0x2, 0x80, 0x0, 0x7, 0x7, 0x6, 0x0, 0x8, 0x6, 0x1, 0xc2, 0x4, 0x80, 0x4, 0x10000, 0x7fff, 0xbf, 0x8, 0x3bc000, 0x26, 0xae0c, 0x100, 0x1, 0xfffeffff, 0xc2, 0x40, 0x7, 0x0, 0x7ff, 0x0, 0x5, 0x7, 0xc3c, 0x5, 0x5, 0xa973, 0x2, 0x3e98a253, 0x5, 0x7f, 0x8, 0x9, 0x6, 0xffff, 0x8001, 0xffff, 0x10000, 0x2, 0x3, 0xfff, 0x10000, 0xda, 0x6, 0x3, 0x17, 0x8, 0x1ff, 0x78800000, 0x5, 0xfffffc01, 0x25c, 0x1, 0x2, 0x5, 0x8000, 0x4002, 0x2, 0x8, 0x1, 0xd45a, 0x12, 0x8, 0x1, 0xfffffff9, 0x1f, 0x6, 0xff, 0x5, 0x364, 0x4, 0x3e, 0xa6, 0x9, 0x81, 0x0, 0x2, 0xcf10, 0x10001, 0x6, 0x66, 0x200, 0x0, 0x3, 0xad, 0x40, 0xfffffffb, 0x9, 0x1, 0xffffffff, 0x2, 0x0, 0x40, 0x1b, 0x41cbefec, 0x20, 0x80000001, 0x4, 0x4, 0xbf2, 0x4, 0xff, 0x1, 0x8, 0x3, 0x7, 0x8, 0x7ff, 0x1, 0x2, 0x6, 0x5, 0xa46, 0x10000, 0x8, 0x8, 0xc8, 0x1000, 0x800, 0x0, 0x7f, 0x8, 0x2, 0xaba, 0x5, 0x1, 0x883, 0x394, 0x1ff, 0x800, 0x3, 0x7, 0xe0, 0x7ff, 0xfffffff8, 0x9, 0x40, 0x9, 0x9, 0x8, 0x0, 0x7945bfc, 0x401, 0x200, 0x101, 0x3, 0x4, 0x0, 0x9, 0x2, 0x2fc0000, 0x1, 0x2, 0x3, 0x1, 0x3, 0x2, 0x6, 0x400, 0x8, 0xbe01, 0x7, 0x1, 0xfff, 0x2, 0x9d9, 0x6, 0x4, 0x7fffffff, 0x2, 0x2, 0x8, 0x4, 0x6, 0x3, 0x5, 0x2400, 0x7ff, 0x6, 0x80000e43, 0x5, 0x3, 0xc49a, 0xfffffbff, 0x9, 0x6, 0x8, 0x1e, 0x8, 0x4, 0x8, 0x3, 0xe8e, 0x0, 0x1f, 0x3, 0x333, 0x9, 0x7, 0x101, 0x8000, 0x7, 0x6c39, 0x80000000, 0xde, 0x9, 0x1, 0xffff6d51, 0x3, 0x1000, 0x54, 0x6, 0x3, 0xffffffff, 0x1, 0x7b4, 0x7fff, 0x20, 0x5, 0x2, 0x1f, 0x6, 0x8, 0x9, 0x8, 0xbc4, 0xf56, 0x7, 0x8001, 0x3, 0x1, 0x4, 0xffff, 0x20000, 0x0, 0x5, 0x1, 0x9, 0x3ff, 0x4, 0x8, 0x3, 0x9, 0x4, 0xba, 0xd53, 0x1ff, 0xffff7fff, 0x1000, 0x7, 0x101, 0xfa, 0xffffffff, 0x843, 0xfffff06e, 0x3, 0x10000, 0x1, 0x7, 0x6, 0x2, 0x5, 0x6, 0xcc40, 0x7fffffff, 0x1, 0x8, 0x3, 0x5, 0x33f, 0x3, 0x0, 0x6c, 0x9c2d, 0x80000001, 0xdec5, 0x2, 0x4ee, 0x6, 0x8, 0x101, 0xd13d, 0x8, 0x3, 0x9, 0x0, 0x5, 0x2, 0x9, 0x7, 0x3ff, 0x8, 0x1f, 0x400, 0xffffffff, 0x401, 0x4, 0x3, 0x10001, 0x2, 0x4, 0x0, 0xa15e, 0x8000, 0xdd, 0xf1a, 0xfffffff8, 0xfffffffe, 0x0, 0x7, 0x4, 0x3, 0x8001, 0x800, 0x3, 0x4, 0x1f, 0xffff0000, 0x6585, 0x2, 0xfffffffc, 0x9, 0x2, 0x8, 0xff, 0xfffffffc, 0x1, 0x7, 0x4, 0x8, 0xc596, 0x6e, 0x401, 0x518, 0x3f, 0x4, 0x5, 0x40, 0x3, 0x10001, 0x1, 0x8, 0x8000, 0x7, 0x100, 0x1, 0x6, 0x4, 0x3, 0xa, 0x0, 0x3f, 0x6, 0x4, 0x3, 0x2b1, 0x45, 0x2, 0x7, 0x40, 0xfffffffb, 0x7fff, 0x8, 0x5, 0x2, 0x9, 0x0, 0x5d55ef45, 0x438, 0xc0ef, 0x80, 0xa7, 0x1, 0xf1, 0x8, 0xfff, 0x1, 0x8000, 0x6ef0, 0x3ff, 0x40000000, 0x5, 0xff, 0x3ff, 0x4, 0x20, 0x9, 0x9, 0x20, 0x0, 0xfff, 0x7fffffff, 0x8001]}) [ 455.578600][T14681] ISOFS: Unable to identify CD-ROM format. 21:06:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea", 0x23}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 455.689573][T14689] IPVS: Error connecting to the multicast addr [ 455.785739][T14698] IPVS: Error connecting to the multicast addr 21:06:55 executing program 5: r0 = gettid() clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000000)) r1 = memfd_create(&(0x7f0000000640)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86\x06\x00\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf1J\xd9\x13Q\x94R/\xdf\x1e\x9e\xe57\xda{\xe1D+\xf35\xcbH\xe6\x0f\xe0]\xef\x8b\xcdk\xfe\xf6\xcc+rp\xd5\b~\xf6\xa2\x87\xed<\xc2bO\x88\x03n% ', 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 21:06:55 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@cruft='cruft'}]}) 21:06:55 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001804000000000000ec000000ec00400007fd4eb3e097000000000000000a0000050000000000000000000000004f3a00f2ffffff00000000000063537113f365340200", @ANYRESDEC], 0x0, 0x5b}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000340)=""/270, 0x10e}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 456.073357][T14702] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:56 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@cruft='cruft'}]}) 21:06:56 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b0900098013", 0x29}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:56 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fc000000090000003c0003800800010001000000140002006970766c616e30000000000000000000080003000000050014000600ff050000000000000000000000000001"], 0x50}}, 0x0) 21:06:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000002c0), 0x10) 21:06:56 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x10}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$SIOCX25SCAUSEDIAG(r4, 0x89ec, &(0x7f0000000280)={0x11, 0x6}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000100)={r3, 0x2}) r5 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x8, 0x1) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r5, 0xc0945662, &(0x7f0000000140)={0x40008, 0x0, [], {0x0, @reserved}}) [ 457.511592][T14739] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:56 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b0900098013", 0x29}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$1(0x1, &(0x7f0000000000)='loem1em1\x00') 21:06:56 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x1010, r1, 0x0) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000000c0)=""/185) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}}) 21:06:56 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@cruft='cruft'}]}) 21:06:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{{}, {0x0, 0x0, 0x1}}, {{0x0, 0x1}}], 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000002c0)={0x1d, r1}, 0x10) close(r0) [ 458.099970][T14756] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value, 0x8) [ 458.600210][T14772] sctp: [Deprecated]: syz-executor.5 (pid 14772) Use of struct sctp_assoc_value in delayed_ack socket option. [ 458.600210][T14772] Use struct sctp_sack_info instead [ 458.666930][T14772] sctp: [Deprecated]: syz-executor.5 (pid 14772) Use of struct sctp_assoc_value in delayed_ack socket option. [ 458.666930][T14772] Use struct sctp_sack_info instead 21:06:58 executing program 3: syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x0, 0x301042) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x4000) 21:06:58 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b0900098013", 0x29}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:58 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @reserved}}) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 21:06:58 executing program 4: syz_mount_image$iso9660(&(0x7f0000000140)='iso9660\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@cruft='cruft'}]}) 21:06:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{{}, {0x0, 0x0, 0x1}}, {{0x0, 0x1}}], 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000002c0)={0x1d, r1}, 0x10) close(r0) 21:06:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) 21:06:58 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x2}, 0x6) syz_genetlink_get_family_id$ipvs(0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, 0x0) 21:06:58 executing program 4: syz_mount_image$iso9660(&(0x7f0000000140)='iso9660\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@cruft='cruft'}]}) [ 459.616596][T14786] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{{}, {0x0, 0x0, 0x1}}, {{0x0, 0x1}}], 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000002c0)={0x1d, r1}, 0x10) close(r0) 21:06:58 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@empty, @empty, @val={@void, {0x8100, 0x2, 0x1, 0x1}}, {@canfd={0xd, {{0x1, 0x1}, 0x1d, 0x6, 0x0, 0x0, "c65466f37b79e6b351243476a899b3acac38341865f075b7c92a31feea1f4de70b88b2d436f983d8c52ca0f08fdf722effe52d2df7051a1e097dabf90805a297"}}}}, &(0x7f0000000140)={0x1, 0x4, [0xe93, 0xf68, 0xb73, 0x683]}) ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) 21:06:59 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x9, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "32dea4f0"}, 0x0, 0x0, @planes=0x0}) 21:06:59 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127a", 0x2c}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:06:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{{}, {0x0, 0x0, 0x1}}, {{0x0, 0x1}}], 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000002c0)={0x1d, r1}, 0x10) close(r0) 21:06:59 executing program 4: syz_mount_image$iso9660(&(0x7f0000000140)='iso9660\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@cruft='cruft'}]}) 21:06:59 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f00000000c0)={{0x62, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x2, 'none\x00', 0x4, 0x9, 0x27}, {@local, 0x4e21, 0x3, 0x2, 0x80000001, 0x4355}}, 0x44) r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000000)) 21:06:59 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r4, 0x0) 21:06:59 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x9, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "32dea4f0"}, 0x0, 0x0, @planes=0x0}) [ 460.494297][T14825] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:59 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000100)) r1 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r2, 0x8004550f, &(0x7f0000000140)=0x6) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000000)) 21:06:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{{}, {0x0, 0x0, 0x1}}, {{0x0, 0x1}}], 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) close(r0) 21:06:59 executing program 4: syz_mount_image$iso9660(&(0x7f0000000140)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:06:59 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127a", 0x2c}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 461.011955][ T33] audit: type=1400 audit(1584824819.897:73): avc: denied { map } for pid=14831 comm="syz-executor.5" path="/root/syzkaller-testdir615864604/syzkaller.7Hy4PK/87/bus" dev="sda1" ino=17140 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 21:07:00 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x9, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "32dea4f0"}, 0x0, 0x0, @planes=0x0}) 21:07:00 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x5c840, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000240)={0x0, 0x4135, "4275bf", 0x7e, 0x1}) ioctl$VIDIOC_G_FMT(r1, 0xc0cc5604, &(0x7f00000000c0)={0x5, @pix_mp={0x4, 0x6, 0x32315659, 0x3, 0x1, [{0x8, 0x24}, {0xa235, 0x400}, {0x40, 0x2}, {0x8c19, 0xfffffe00}, {0x5, 0x4}, {0x6, 0x2}, {0x2, 0xfffffff8}, {0x9, 0xfd7}], 0x7, 0x7f, 0x7d2973ebca19be3b, 0x2, 0x2}}) [ 461.671977][T14855] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:07:00 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127a", 0x2c}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:00 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x9, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "32dea4f0"}, 0x0, 0x0, @planes=0x0}) 21:07:00 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r4, 0x0) [ 461.808044][T14856] ISOFS: Unable to identify CD-ROM format. 21:07:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{{}, {0x0, 0x0, 0x1}}, {{0x0, 0x1}}], 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) close(r0) 21:07:01 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x80000000}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0x4, 0x7f, "baf67736eb6d0fe30eb982ede569d65638abb3", 0x4, 0x7fff}) 21:07:01 executing program 4: syz_mount_image$iso9660(&(0x7f0000000140)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 462.214217][T14870] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:07:01 executing program 3: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x0, 0x9, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "32dea4f0"}, 0x0, 0x0, @planes=0x0}) 21:07:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{{}, {0x0, 0x0, 0x1}}, {{0x0, 0x1}}], 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) close(r0) 21:07:01 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1", 0x2d}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 462.619211][T14882] ISOFS: Unable to identify CD-ROM format. 21:07:01 executing program 3: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x0, 0x9, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "32dea4f0"}, 0x0, 0x0, @planes=0x0}) 21:07:01 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)={0x30, 0x6f, 0x2, {0x3, [{0x20, 0x2, 0x8}, {0x10, 0x4, 0x6}, {0x5, 0x4, 0x7}]}}, 0x30) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x2c, 0xc, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x48880) r2 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}}) 21:07:01 executing program 5: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x3a8f7dc2ac1e8d0b, &(0x7f0000000040)={0xa, 0x4e33, 0x0, @mcast2}, 0x1c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000005140)={0x1}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)='W', 0x1, 0x4000000, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @multicast2}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8], 0x2c}, 0x0, 0x0, 0x0, 0x500, 0x0, 0x20c200a2, r0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @multicast2}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8], 0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r4}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x80, 0x0, 0x6642d838a3dc9605, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x1}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @local}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x3}}, @NL80211_ATTR_MAC={0xa, 0x6, @random="37b3cd761b6c"}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r0}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x44}, 0x60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) getsockopt$netlink(r6, 0x10e, 0x2, &(0x7f0000000080)=""/138, &(0x7f0000000000)=0x8a) 21:07:01 executing program 4: syz_mount_image$iso9660(&(0x7f0000000140)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:07:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{{}, {0x0, 0x0, 0x1}}, {{0x0, 0x1}}], 0x10) bind$can_raw(r0, &(0x7f00000002c0), 0x10) close(r0) [ 463.040408][T14898] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:07:02 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1", 0x2d}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 463.249936][T14909] ISOFS: Unable to identify CD-ROM format. 21:07:02 executing program 3: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x0, 0x9, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "32dea4f0"}, 0x0, 0x0, @planes=0x0}) 21:07:02 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) ptrace$peeksig(0x4209, r1, &(0x7f00000000c0)={0x3f, 0x0, 0x9}, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f00000006c0)={"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"}) [ 463.473317][T14916] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:07:02 executing program 4: syz_mount_image$iso9660(&(0x7f0000000140)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)) 21:07:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{{}, {0x0, 0x0, 0x1}}, {{0x0, 0x1}}], 0x10) bind$can_raw(r0, &(0x7f00000002c0), 0x10) close(r0) 21:07:02 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fgetxattr(r0, &(0x7f0000000000)=@known='trusted.overlay.opaque\x00', 0x0, 0x0) 21:07:02 executing program 2: syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x7, 0x0) 21:07:02 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1", 0x2d}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:03 executing program 3: r0 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x9, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "32dea4f0"}, 0x0, 0x0, @planes=0x0}) [ 463.974211][T14930] ISOFS: Unable to identify CD-ROM format. 21:07:03 executing program 2: syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x5000, 0x101401) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)={{0x108, 0x58, 0x3, 0x3dc, 0x3a3, 0x9, 0x1ad, 0xd7f}, "dfb554894171849c6b81f66e91a1d082b080ee90681b32f52ec69a636865ad44b64cba2175210881e549f769b546e3913b2e110e9fcefa168f355f2c60849a4690fde110c3be599a1d9ceb26a0e03c717287f0876c611461e83a3aa650ecd6e86847a031ea76ee9e99c48990e491c76eddccde8f8a8d174d6d047c8f", [[], [], [], [], []]}, 0x59c) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @bt={0x7, 0x2, 0x1, 0x3, 0x1, 0x5, 0x1, 0x7f, 0x80000001, 0x7, 0xfffffffd, 0x6, 0x3d666b1e, 0x200, 0x12, 0x4, {0x0, 0x9e1}, 0x7, 0xff}}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r2, 0x0) flistxattr(r2, &(0x7f0000000140)=""/62, 0x3e) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x112, r1, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f00000000c0)=""/118) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000180)=0x3ff) 21:07:03 executing program 4: syz_mount_image$iso9660(&(0x7f0000000140)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)) 21:07:03 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f28600580830"], 0xd) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) [ 464.413429][T14948] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:07:03 executing program 3: r0 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x9, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "32dea4f0"}, 0x0, 0x0, @planes=0x0}) 21:07:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{{}, {0x0, 0x0, 0x1}}, {{0x0, 0x1}}], 0x10) bind$can_raw(r0, &(0x7f00000002c0), 0x10) close(r0) 21:07:03 executing program 2: openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 21:07:03 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f28600580830"], 0xd) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 21:07:03 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 464.810426][T14957] ISOFS: Unable to identify CD-ROM format. 21:07:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000002c0)={0x1d, r1}, 0x10) close(r0) 21:07:04 executing program 4: syz_mount_image$iso9660(&(0x7f0000000140)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)) [ 465.138842][T14975] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:04 executing program 3: r0 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x9, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "32dea4f0"}, 0x0, 0x0, @planes=0x0}) 21:07:04 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f28600580830"], 0xd) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) [ 465.272390][T14977] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:07:04 executing program 2: socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_ADDRESS={0xa, 0x1, @random="4fcd5366cd00"}]}, 0x2c}}, 0x0) [ 465.586470][T14987] ISOFS: Unable to identify CD-ROM format. 21:07:04 executing program 2: syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x800, 0x301042) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000080)) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00'}) ioprio_set$uid(0x3, 0x0, 0x4000) 21:07:04 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:04 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f28600580830"], 0xd) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 21:07:04 executing program 3: syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x0, 0x9, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "32dea4f0"}, 0x0, 0x0, @planes=0x0}) 21:07:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f00000002c0)={0x1d, r0}, 0x10) close(0xffffffffffffffff) 21:07:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(r1, 0xffffffffffffffff) [ 466.189911][T15007] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:05 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 21:07:05 executing program 3: syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x0, 0x9, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "32dea4f0"}, 0x0, 0x0, @planes=0x0}) [ 466.322907][T15017] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:07:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f00000002c0)={0x1d, r0}, 0x10) close(0xffffffffffffffff) 21:07:05 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2018, 0x0) 21:07:05 executing program 2: openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) 21:07:05 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:05 executing program 3: syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x0, 0x9, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "32dea4f0"}, 0x0, 0x0, @planes=0x0}) 21:07:05 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 21:07:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f00000002c0)={0x1d, r0}, 0x10) close(0xffffffffffffffff) 21:07:06 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, 0x0) 21:07:06 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000002c0)={0x1d, r1}, 0x10) close(r0) 21:07:06 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001804000000000000ec000000ec00400007fd4eb3e097000000000000000a0000050000000000000000000000004f3a00f2ff", @ANYRESDEC], 0x0, 0x4a}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000340)=""/270, 0x10e}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 467.288937][T15052] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:06 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) [ 467.408971][T15056] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:07:06 executing program 2: 21:07:06 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, 0x0) 21:07:06 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:06 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000002c0)={0x1d, r1}, 0x10) close(r0) 21:07:06 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f28600580830"], 0xd) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 21:07:07 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, 0x0) 21:07:07 executing program 2: 21:07:07 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000002c0)={0x1d, r1}, 0x10) close(r0) 21:07:07 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f28600580830"], 0xd) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) [ 468.307925][T15089] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 468.362465][T15092] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:07:07 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "32dea4f0"}, 0x0, 0x0, @planes=0x0}) 21:07:09 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000002c0)={0x1d, r1}, 0x10) close(r0) 21:07:09 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:09 executing program 2: 21:07:09 executing program 4: 21:07:09 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "32dea4f0"}, 0x0, 0x0, @planes=0x0}) 21:07:09 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f28600580830"], 0xd) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 21:07:09 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "32dea4f0"}, 0x0, 0x0, @planes=0x0}) [ 470.823055][T15114] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 470.867253][T15114] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:07:10 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f28600580830"], 0xd) recvmmsg(0xffffffffffffffff, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 21:07:10 executing program 2: 21:07:10 executing program 4: 21:07:10 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_raw(r0, &(0x7f00000002c0), 0x10) close(r0) 21:07:10 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:10 executing program 2: 21:07:10 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f28600580830"], 0xd) recvmmsg(0xffffffffffffffff, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 21:07:10 executing program 3: 21:07:10 executing program 2: 21:07:10 executing program 4: [ 471.880794][T15140] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:11 executing program 3: 21:07:11 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f28600580830"], 0xd) recvmmsg(0xffffffffffffffff, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 21:07:11 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_raw(r0, &(0x7f00000002c0), 0x10) close(r0) [ 471.983093][T15140] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:07:11 executing program 2: 21:07:11 executing program 4: 21:07:11 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:11 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_raw(r0, &(0x7f00000002c0), 0x10) close(r0) 21:07:11 executing program 3: 21:07:11 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f28600580830"], 0xd) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 21:07:11 executing program 4: 21:07:11 executing program 2: [ 472.757990][T15166] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:11 executing program 3: 21:07:11 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f00000002c0)={0x1d, r1}, 0x10) close(r0) [ 472.866671][T15161] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:07:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f28600580830"], 0xd) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 21:07:12 executing program 4: 21:07:12 executing program 2: 21:07:12 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:12 executing program 3: 21:07:12 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f00000002c0)={0x1d, r1}, 0x10) close(r0) 21:07:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f28600580830"], 0xd) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 21:07:12 executing program 4: 21:07:12 executing program 2: [ 473.503714][T15188] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 473.519316][T15188] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:07:12 executing program 3: 21:07:12 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:12 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f00000002c0)={0x1d, r1}, 0x10) close(r0) 21:07:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f28600580830"], 0xd) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 21:07:13 executing program 2: 21:07:13 executing program 4: 21:07:13 executing program 3: [ 474.172721][T15209] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 474.248662][T15204] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:07:13 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) bind$can_raw(r0, 0x0, 0x0) close(r0) 21:07:13 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f28600580830"], 0xd) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 21:07:13 executing program 2: 21:07:13 executing program 4: 21:07:13 executing program 3: 21:07:13 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:13 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) bind$can_raw(r0, 0x0, 0x0) close(r0) 21:07:13 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f28600580830"], 0xd) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 21:07:14 executing program 4: 21:07:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000000400)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x2}}}, 0x24}}, 0x0) 21:07:14 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000300)={@local}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup3(r2, r0, 0x0) [ 475.065865][T15232] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:14 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f28600580830"], 0xd) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 21:07:14 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) bind$can_raw(r0, 0x0, 0x0) close(r0) [ 475.190190][T15232] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:07:14 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000300)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup3(r2, r0, 0x0) 21:07:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 21:07:14 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:14 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) bind$can_raw(r0, &(0x7f00000002c0), 0x10) close(r0) 21:07:14 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000300)={@local}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup3(r2, r0, 0x0) 21:07:14 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f28600580830"], 0xd) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) [ 475.774304][T15259] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:14 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000300)={@my=0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup3(r1, r0, 0x0) [ 475.881528][T15259] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:07:15 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_score_adj\x00') recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)=@tipc=@name={0x1e, 0x2, 0x0, {{}, 0x3}}, 0x80) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='+4', 0x2}], 0x6) 21:07:15 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) bind$can_raw(r0, &(0x7f00000002c0), 0x10) close(r0) 21:07:15 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:15 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f28600580830"], 0xd) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 21:07:15 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x1}, 0x14}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffc7b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:07:15 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRES16], 0x0, 0x176}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000340)=""/270, 0x10e}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:07:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x48}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0}, 0x0) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x40000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 476.500846][T15286] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:15 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) bind$can_raw(r0, &(0x7f00000002c0), 0x10) close(r0) [ 476.555890][T15290] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:07:15 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f28600580830"], 0xd) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 21:07:15 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:15 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000002c0)={0x1d, r1}, 0x10) close(0xffffffffffffffff) 21:07:16 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f28600580830"], 0xd) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) [ 477.152955][T15316] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 477.202919][T15316] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:07:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x48}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0}, 0x0) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x40000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x20}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:07:16 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000002c0)={0x1d, r1}, 0x10) close(0xffffffffffffffff) 21:07:16 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f28600580830"], 0xd) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 21:07:16 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001804000000000000ec000000ec00400007fd4eb3e097000000000000000a0000050000003d0a04fb4179bcf5004f3a00f2ffffff00000000000063537113f3020000005000000000000000000000000000ed00000000000000af0000000000000000000000be079ec80e694e8f432760ebae9f00002b0a31d0e70000000000000006339f69dfadb72aaa3200006f34a7fa668bb9b302af9d7700737b8cba19d96e8d91e87758b0b120c7734953be0048bd07bc2317073e6825fbcfb768f8f5b1e994eeeb3005c6b457d4d285c882ca65a97b00882fee3498658a4009565f17972b79c5d054eee26fd8382b3a9f0fd92faf75354b2cf3feb628d0d37e395b0862ab8c9a34fe15ddbb713d3fed65c45e07894012752cb183e43f24882f8deff026259996351d589dfa0894f295a3b76da1c8dde41dba", @ANYRESDEC], 0x0, 0x14d}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000340)=""/270, 0x10e}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:07:16 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 477.807261][T15343] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 477.866229][T15343] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:07:18 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f28600580830"], 0xd) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 21:07:18 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:18 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000002c0)={0x1d, r1}, 0x10) close(0xffffffffffffffff) 21:07:18 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRES16], 0x0, 0x17a}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000340)=""/270, 0x10e}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:07:18 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000340)={0x0, 0x803e0000, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000001000000010000000600000003000000"], 0x18}, 0x0) recvmsg(r1, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/25, 0x19}, 0x0) [ 479.750265][T15357] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 479.819730][T15362] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:07:18 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x104) 21:07:18 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f28600580830"], 0xd) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 21:07:19 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:19 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f00000002c0)='f2fs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:07:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) [ 480.368548][T15376] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 480.404077][T15376] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 480.427078][T15380] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 480.435065][T15380] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 480.444868][T15380] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 480.452925][T15380] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 21:07:19 executing program 2: syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_adj\x00') sendfile(r0, r0, 0x0, 0x3) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 21:07:19 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f28600580830"], 0xd) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 21:07:19 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) 21:07:19 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f00000002c0)='f2fs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 21:07:19 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 480.784976][ T33] audit: type=1400 audit(1584824839.837:74): avc: denied { prog_load } for pid=15389 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 480.937303][T15394] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 480.945376][T15394] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 480.999170][T15399] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 480.999579][T15394] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 481.016072][T15394] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 21:07:20 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) [ 481.047084][T15403] syz-executor.2 (15403): /proc/15403/oom_adj is deprecated, please use /proc/15403/oom_score_adj instead. [ 481.101129][T15399] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 481.412966][ T33] audit: type=1400 audit(1584824840.467:75): avc: denied { prog_run } for pid=15389 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 21:07:21 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x100000289) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) tkill(r2, 0x401004000000014) 21:07:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) 21:07:21 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmmsg$inet(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="ba", 0x1}], 0x1}}], 0x1, 0x0) 21:07:21 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:21 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 21:07:21 executing program 0: msgsnd(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="020000007fc2cb650c9b861000e4d238210db79203a5a6cd0b5676ea"], 0x1, 0x0) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000124000/0x1000)=nil, 0x1000, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000140)) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x112) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) pipe(0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a80)=ANY=[@ANYBLOB="4af50a97f32270dea4eb"], 0xa) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) [ 482.868134][T15422] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 482.967851][T15426] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 482.981992][T15422] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:07:22 executing program 2: syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="666d61736b3d3030303030303030303030303030303005"]) [ 482.989950][ T33] audit: type=1804 audit(1584824842.037:76): pid=15428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir454913246/syzkaller.TRbO3z/221/bus" dev="sda1" ino=17279 res=1 21:07:22 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) [ 483.159879][ T33] audit: type=1804 audit(1584824842.207:77): pid=15424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir454913246/syzkaller.TRbO3z/221/bus" dev="sda1" ino=17279 res=1 21:07:22 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 483.301342][T15440] ntfs: (device loop2): parse_options(): Invalid fmask option argument: 0000000000000000 21:07:22 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x0) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 21:07:22 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) 21:07:22 executing program 4: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={[{@shortname_mixed='shortname=mixed'}]}) [ 483.478681][T15440] ntfs: (device loop2): parse_options(): Invalid fmask option argument: 0000000000000000 21:07:22 executing program 0: msgsnd(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="020000007fc2cb650c9b861000e4d238210db79203a5a6cd0b5676ea"], 0x1, 0x0) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000124000/0x1000)=nil, 0x1000, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000140)) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x112) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) pipe(0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a80)=ANY=[@ANYBLOB="4af50a97f32270dea4eb"], 0xa) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) 21:07:22 executing program 2: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/248, 0xf8}], 0xf8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2002) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) [ 483.785506][T15454] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 483.878941][T15454] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:07:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000041000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000240)="b812008ee066b80500000066b9006000000f01c1baf80c66b85801418a66efbafc0c66ed26f2660f3264660ff8110f20d86635080000000f22d8b89a000f00d09a35366b0066b9800000c00f326635008000000f300fed3f", 0x58}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 483.917687][ T33] audit: type=1804 audit(1584824842.967:78): pid=15465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir454913246/syzkaller.TRbO3z/222/bus" dev="sda1" ino=16499 res=1 [ 483.960221][T15461] FAT-fs (loop4): bogus number of reserved sectors [ 483.967725][T15461] FAT-fs (loop4): Can't find a valid FAT filesystem 21:07:23 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x0) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) [ 484.118948][T15461] FAT-fs (loop4): bogus number of reserved sectors [ 484.126106][T15461] FAT-fs (loop4): Can't find a valid FAT filesystem 21:07:23 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:23 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1f}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) clone(0xfe6bf17c399a4110, 0x0, 0x0, 0x0, 0x0) 21:07:23 executing program 0: msgsnd(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="020000007fc2cb650c9b861000e4d238210db79203a5a6cd0b5676ea"], 0x1, 0x0) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000124000/0x1000)=nil, 0x1000, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000140)) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x112) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) pipe(0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a80)=ANY=[@ANYBLOB="4af50a97f32270dea4eb"], 0xa) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) [ 484.667997][T15487] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:23 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x0) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 21:07:23 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000003700)={@local, @broadcast, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "bc5af2", 0x10, 0x21, 0x0, @empty, @ipv4={[], [], @multicast2}, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "3248ed", 0x0, "6bec27"}}}}}}}, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) [ 484.707032][ T33] audit: type=1400 audit(1584824843.757:79): avc: denied { cpu } for pid=15488 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 484.758006][T15487] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:07:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000000c0)) [ 484.868211][ T33] audit: type=1400 audit(1584824843.847:80): avc: denied { sys_admin } for pid=15488 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 485.012746][ T33] audit: type=1804 audit(1584824843.987:81): pid=15493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir454913246/syzkaller.TRbO3z/223/bus" dev="sda1" ino=16500 res=1 21:07:24 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 21:07:24 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x298) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) 21:07:24 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x1600bd80, &(0x7f0000000180)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 21:07:24 executing program 0: msgsnd(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="020000007fc2cb650c9b861000e4d238210db79203a5a6cd0b5676ea"], 0x1, 0x0) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000124000/0x1000)=nil, 0x1000, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000140)) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x112) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) pipe(0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a80)=ANY=[@ANYBLOB="4af50a97f32270dea4eb"], 0xa) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) 21:07:24 executing program 2: creat(&(0x7f0000000080)='./bus\x00', 0x0) setxattr$security_ima(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000300)='security.ima\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1009, 0x0) 21:07:24 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 21:07:24 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x8812, r0, 0x0) 21:07:24 executing program 3: mlockall(0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getaffinity(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 485.815995][T15522] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 485.962641][T15522] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:07:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) r0 = open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000077000)=""/133, 0x18) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x298) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) 21:07:25 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2008002) sendfile(r0, r1, 0x0, 0x200fff) socket$inet_udp(0x2, 0x2, 0x0) [ 486.096932][ T33] kauditd_printk_skb: 1 callbacks suppressed [ 486.096999][ T33] audit: type=1400 audit(1584824845.147:83): avc: denied { map } for pid=15532 comm="syz-executor.4" path="socket:[46160]" dev="sockfs" ino=46160 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=tcp_socket permissive=1 21:07:25 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 21:07:25 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0x69, 0xfffffffffffffd80, &(0x7f0000000380)="b92203b700030000009e40f086dd1fffffe1023a59f3185afad608003270e86808f900008700632177fbac5b1412e0000001c699da153f08a0e6e380f60108f683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8dcd1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b33b2da9820c1234dc076d51df5c345", 0x0, 0xfd, 0x6000000000000000, 0x0, 0x0, &(0x7f0000000080)="a68f125e1332437266039761fc75e247a46c134af619f8a5ec4ed09593a414610c1766d318e495d3d3c43b86a0c83717ec5c0bfb6bcb6c", &(0x7f0000000040)="7240c9da20313e418155ab2835a3d3f304bab22308b8b0145d465c71f581bd14a55700216541d871106490b881953e556b64d19e09a09c06de179691a40ef8"}, 0x28) [ 486.355521][T15541] xt_CT: You must specify a L4 protocol and not use inversions on it 21:07:25 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:25 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) 21:07:25 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e07000000"], 0x8) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) [ 486.832996][T15555] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:26 executing program 4: openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x20801, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr(&(0x7f0000000300)='./bus\x00', &(0x7f0000000340)=@known='com.apple.system.Security\x00', &(0x7f00000003c0)='/dev/urandom\x00', 0xd, 0x2) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x208200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)={0x68, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_ADT, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffff9}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PACKETS={0x3, 0x19, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xb67}, @IPSET_ATTR_TIMEOUT={0x0, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_CIDR={0x2, 0x3, 0x7f}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) [ 486.936368][T15555] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:07:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e07000000"], 0x8) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 21:07:26 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x80, 0x0) [ 487.225095][ T33] audit: type=1800 audit(1584824846.277:84): pid=15546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=17269 res=0 21:07:26 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 487.704555][T15576] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 487.781340][T15577] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:07:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000041000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000240)="b812008ee066b80500000066b9006000000f01c1baf80c66b85801418a66efbafc0c66ed26f2660f3264660ff8110f20d86635080000000f22d8b89a000f00d09a35366b0066b9800000c00f326635008000000f300fed3f", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:07:27 executing program 2: syz_emit_ethernet(0xa6, &(0x7f00000001c0)={@local, @dev, @void, {@ipv4={0x800, @gre={{0x15, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @empty, {[@cipso={0x86, 0x11, 0x0, [{0x0, 0xb, "bbe9a034525be7a4c6"}]}, @lsrr={0x83, 0xb, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@broadcast}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}, 0x0) 21:07:27 executing program 0: perf_event_open(&(0x7f0000000440)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 21:07:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e07000000"], 0x8) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 21:07:27 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 488.641209][T15590] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f286"], 0xc) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 21:07:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000077000)=""/133, 0x18) sendmmsg(0xffffffffffffffff, &(0x7f00000096c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000500)=[{0xc}], 0xc}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f00000030c0)=@hci={0x1f, 0x1, 0x3}, 0x80, &(0x7f0000003440)=[{0x0}, {0x0}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000003700)="65e34b6f846b7a80fe1cab37018d117ddb4c827c5b59f74189902f622fe6a3c88f8302e3bac551ffcff3c366be55a3ff557844308c5f5a3af62262955d2b", 0x3e}, {&(0x7f00000037c0)}], 0x2, &(0x7f0000003840)=[{0x20, 0x29, 0x4b7, "5f85656312eb7991af1c9da1b53305c57b"}, {0xdc, 0x0, 0x0, "0febfb44b2489b13340c280e12315e440e7e3d74262e1d82dbfdebf742e10dc345971f8027ad9a035f584fb4e6d1d2ecde7a418dff5940e440fd00b3daa6247e59aa849e6188e9e3e5632fb2af65b95f063a1ea3eaca8e47a3730e3163f9ef5bae9203ce927470262c7043440cbc4f675d95abc5fb2bfc41d415b19737516c1a5f0dbfd05026d11f451e33da26b75c6b7d680d9e93c02b81a9f49294998071c6f4c1c47df6bd6112f5caf37910a2e573d289c18704b1c8cef896574bb5bdddfbe8e1204c374ee5fa6e5b8099f9"}, {0xc}, {0x40, 0x111, 0x0, "9d7f02deb1fdbbc1961804d351759e3336cdd1d455288a2f7939699057aacc32da677d69854f5b14266ce66eacb4eaeaa7edc3c8"}, {0x3c, 0x105, 0x8, "870722088fcbc87ecba6d2bbb09feadeb7500978884ecf58527d0467ffa947f088fb298d15557b413ff7314ae1ed"}, {0xc}], 0x190}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000004f80)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000005100)=[{&(0x7f0000005000)="8f70298d54d68d780a944a1a3faa246e1ab5622e7cb2734c12ab458758d7c1b0fe7a2e7b7eb0d6", 0x27}], 0x1}}, {{&(0x7f0000005240)=@llc={0x1a, 0x312, 0x0, 0x3, 0x3f, 0x7, @dev}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000007440)=[{0x0}], 0x1, &(0x7f0000007480)=[{0x3c, 0x0, 0x0, "2e60d057ddfdd2e20edcecbac579e5a7eacf5813d510040ffc58c6f976d66293417746f8536172fda336f2f79f6e"}, {0xc}], 0x48}}], 0x9, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4010aefd, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9}) [ 488.705611][T15590] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:07:27 executing program 0: openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x20801, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x208200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, {0x0, 0x7, 0x0}}, 0x48) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x68, 0x0, 0x100, 0x0, 0x1, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}, [""]}, 0x68}}, 0x0) [ 490.258374][ T33] audit: type=1800 audit(1584824849.307:85): pid=15568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=17282 res=0 21:07:29 executing program 4: 21:07:29 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x0, 0x5, 0x5, 0x0, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd06, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 21:07:29 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f286"], 0xc) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 21:07:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) 21:07:29 executing program 0: 21:07:29 executing program 0: [ 490.783299][T15622] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f286"], 0xc) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 21:07:30 executing program 2: 21:07:30 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:30 executing program 4: 21:07:30 executing program 3: 21:07:30 executing program 0: 21:07:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f2860058"], 0xe) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 21:07:30 executing program 2: [ 491.428160][T15638] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:30 executing program 4: 21:07:30 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:30 executing program 0: 21:07:30 executing program 3: 21:07:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f2860058"], 0xe) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 21:07:30 executing program 2: 21:07:30 executing program 4: 21:07:31 executing program 0: [ 492.088380][T15653] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:31 executing program 3: 21:07:31 executing program 2: 21:07:31 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f2860058"], 0xe) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 21:07:31 executing program 4: 21:07:31 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:31 executing program 3: 21:07:31 executing program 0: 21:07:31 executing program 4: [ 492.777201][T15675] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:31 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f286005808"], 0xf) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 21:07:31 executing program 2: 21:07:32 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:32 executing program 3: 21:07:32 executing program 0: 21:07:32 executing program 2: 21:07:32 executing program 4: [ 493.297937][T15690] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:32 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f286005808"], 0xf) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 21:07:32 executing program 0: 21:07:32 executing program 3: 21:07:32 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:32 executing program 4: 21:07:32 executing program 2: 21:07:32 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f286005808"], 0xf) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 21:07:32 executing program 0: [ 493.879006][T15706] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:33 executing program 3: 21:07:33 executing program 4: 21:07:33 executing program 2: 21:07:33 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:33 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f28600580830"], 0xd) recvmmsg(0xffffffffffffffff, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 21:07:33 executing program 3: 21:07:33 executing program 0: 21:07:33 executing program 2: 21:07:33 executing program 4: [ 494.606250][T15723] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:33 executing program 3: 21:07:33 executing program 0: 21:07:33 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f28600580830"], 0xd) recvmmsg(0xffffffffffffffff, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 21:07:33 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:34 executing program 4: 21:07:34 executing program 2: 21:07:34 executing program 0: 21:07:34 executing program 3: [ 495.199831][T15744] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:34 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f28600580830"], 0xd) recvmmsg(0xffffffffffffffff, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 21:07:34 executing program 4: 21:07:34 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:34 executing program 2: 21:07:34 executing program 0: 21:07:34 executing program 3: 21:07:34 executing program 4: 21:07:34 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f28600580830"], 0xd) recvmmsg(r0, 0x0, 0x0, 0x40, 0x0) [ 495.796614][T15760] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:34 executing program 2: 21:07:35 executing program 0: 21:07:35 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:35 executing program 3: 21:07:35 executing program 4: 21:07:35 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f28600580830"], 0xd) recvmmsg(r0, 0x0, 0x0, 0x40, 0x0) 21:07:35 executing program 2: 21:07:35 executing program 0: [ 496.522814][T15777] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000280)="0f222136dbe40f01f30f76590a66b88effffff0f23c80f21f86635000000000f23f866b9800000c00f326635002000000f30baf80c66b80811a88d66efbafc0c66b88687a7e666ef0fa166b9800000c00f326635004000000f300f20e06635002000000f22e0", 0x66}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000002f000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 21:07:35 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001804000000000000ec000000ec00400007fd4eb3e097000000000000000a0000050000000000000000000000004f3a00f2ffffff00000000000063537113f36534020000000000000000000000000000000000ed000000000000"], 0x0, 0x5e}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000340)=""/270, 0x10e}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:07:35 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') recvmmsg(0xffffffffffffffff, &(0x7f00000027c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=""/46, 0x2e}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 21:07:35 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f28600580830"], 0xd) recvmmsg(r0, 0x0, 0x0, 0x40, 0x0) 21:07:35 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x48}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x40000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x20, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 497.171001][T15804] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:36 executing program 4: 21:07:36 executing program 3: 21:07:36 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:36 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f28600580830"], 0xd) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) 21:07:37 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmmsg$alg(r3, &(0x7f0000001b80)=[{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000040)="7604819418974dad5b85a35d7195f4ed1ebd44e5fe812c523cf324f64b5d5543af30b094e7d22ef69dd7f50edd130548fd38cd1e265efacb041cc07d2b96403aaf1083afd77a43a2a72ac4f38e625eeab3c8059596fa0466255ef871c564", 0x5e}, {&(0x7f00000000c0)="5f270c5b664105bde596", 0xa}], 0x2}], 0x1, 0x0) recvmsg(r3, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001c80)=""/104, 0x68}], 0x1}, 0x0) 21:07:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x48}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r3) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x40000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x20, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0}, 0x0) pipe2(&(0x7f0000000000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:07:37 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') recvmmsg(0xffffffffffffffff, &(0x7f00000027c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=""/46, 0x2e}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 21:07:37 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000100)={{0x94}, {}, 0xfffffffd}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000180)={0x0, {0x400}}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x67, 0x5, 0x8]}) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 498.199607][T15823] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:37 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0], 0x4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:37 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f28600580830"], 0xd) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) [ 499.050032][T15850] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:38 executing program 2: perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x802, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280), 0x27c) 21:07:38 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_RESETEP(r0, 0x41045508, 0x0) 21:07:38 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0], 0x4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:38 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f28600580830"], 0xd) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) 21:07:38 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="ff4e34443227c5d388144f479d005aff"}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') sendfile(r0, r1, 0x0, 0xa808) 21:07:38 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42133, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/82, 0x52}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)={r0}, &(0x7f00000000c0)=0x1c9) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 21:07:38 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x41045508, 0x0) 21:07:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x48}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r3) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x40000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x20, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) pipe2(&(0x7f0000000000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 499.810469][T15876] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:39 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f28600580830"], 0xd) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) 21:07:39 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0], 0x4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:39 executing program 0: perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x73) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 21:07:39 executing program 4: perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000001c0)={0xa, {0x7, 0x6, 0x5}}, 0xa) syz_open_dev$vcsn(0x0, 0x0, 0x244800) [ 500.497860][T15903] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:39 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f28600580830"], 0xd) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) 21:07:39 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x41045508, 0x0) 21:07:39 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:39 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_iso={0x0, {}, 0x0, 0x0, &(0x7f00000001c0)="a1", 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, [{}]}) 21:07:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @dev}}, 0x0, 0x2, 0x34, 0x0, "000000400000040000000000000000000000000000020000000000000000000089506108ec5d366a0000002300000000000000000000000000000000eaffff00"}, 0xd8) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x40000}, 0x1c) 21:07:39 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="23000000220009bb00b940050000000a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) [ 501.094902][T15928] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:40 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f28600580830"], 0xd) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) 21:07:40 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:40 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x41045508, 0x0) 21:07:40 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xaf930100, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a0036459cb926cd03ccb7e638a66c86163e5e05e1737efa8d3181ce4284aa97b074c8e47f75a9793acbd2a0f91cf7ba8571096382df1b166a1ac2ab2863a703699433042c090000002f0f55fd291ee26309d9cca2bc6d9bf27b77215ee651916f81b430ac49e8b172a779df69476ce56a2d6295e8f7f23413bb57090823877b7e4299ca21cd8ee27360fd415d55b4ae3f04cfe7414eb60000000000b7b146873dbd6845e76687fc730d891b00d3ca3b2b2736790a79c56d525ac3c22e1e101983aa6be1e224ec0f95898ee24ed04deaee850534bba097a7639e5ab304fd099082404d00"/280, @ANYRES32, @ANYBLOB="a17aae0e3f5e9198ea5bc0a5796bc26ad49c341715cf8a05c97c3b622643c83cbf23bd2ae90f6974c1604051f89069668761be6566cdc1e133e2fd853386dba2eb4c22b08fac46e50e776b2deceafa446aafc47aeca4c6ace8188c30f8d91ed41aa700fd753af52816820d42c33e5d43d6d80908ee09c2705f96138a24419732bd7f8da899d82e320e7c9e240ae6ebfa48c2352916abe9f74bd8e8f6341fb06e542de68a88328febdd3de31f9b15c1b72b296f3983aafabbdb8ee88aff20cf5019f79b8221ad0f49d8ae01bd81c38b05"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x49249249249262e, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 21:07:40 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/219, 0xdb}], 0x1, 0x1) 21:07:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x2, 0x34, 0x0, "000000400000040000000000000000000000000000020000000000000000000089506108ec5d366a0000002300000000000000000000000000000000eaffff00"}, 0xd8) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x40000}, 0x1c) 21:07:40 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f28600580830"], 0xd) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) [ 501.624404][T15944] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 501.649145][T15948] device vxlan0 entered promiscuous mode 21:07:40 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x41045508, 0x0) 21:07:41 executing program 3: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r0, r1, 0x0, 0x320c) 21:07:41 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:41 executing program 0: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000140)="120000001600e70d017b00000000008e1584", 0x28f, 0x0, 0x0, 0x3d4) recvmmsg(r0, &(0x7f0000004e00), 0x27b, 0x0, 0x0) 21:07:41 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 21:07:41 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'vlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8}, @IFLA_VF_PORTS={0x4}]}, 0x2c}}, 0x0) [ 502.631108][T15975] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:41 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x1) 21:07:41 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000c21eaf7696bb9ca9c23e5d08ea6400ec000000ec00400007fd4eb3e097000000000005000000000000617e6309000000000100002b5a04001b000000004f3a00f2fffff700000000000063537113f36534020000000000000000000000ed000000000000000000000000ee00000200000000000000000000000633b6ff07000000000000c987c216b0a6f5"], 0x0, 0x96}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:07:41 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3f"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:41 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f28600580830"], 0xd) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) [ 502.845782][T15982] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. 21:07:42 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200"], 0x3}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:07:42 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) [ 503.210603][T15996] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:42 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x14123f2dc6a8be1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000000040), 0x14123f2dc6a8be1, 0x0) 21:07:42 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3f"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 503.464516][T16007] selinux_netlink_send: 22 callbacks suppressed [ 503.464565][T16007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16007 comm=syz-executor.3 [ 503.528420][T16007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16007 comm=syz-executor.3 [ 503.565751][T16007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16007 comm=syz-executor.3 [ 503.607027][T16007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16007 comm=syz-executor.3 [ 503.609677][T16012] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 503.643027][T16007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16007 comm=syz-executor.3 21:07:42 executing program 0: socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x4000) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) clone(0x2121001dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) arch_prctl$ARCH_GET_FS(0x1003, 0x0) mlockall(0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 503.669620][T16007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16007 comm=syz-executor.3 [ 503.703074][T16007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16007 comm=syz-executor.3 21:07:42 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3f"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 503.756454][T16007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16007 comm=syz-executor.3 21:07:42 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) [ 503.814229][T16007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16007 comm=syz-executor.3 [ 503.846109][T16007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16007 comm=syz-executor.3 [ 504.000630][T16020] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:43 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200ff7e070000000000f28600580830"], 0xd) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 21:07:43 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbb"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 504.497330][T16033] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:45 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000000000000000008", @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100736662002c000200280001"], 0x3}}, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000340)="125d4c1bcbfd9a81143acf5d72", 0xd) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:07:45 executing program 3: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c00300000801000008010000200200000000000000000000f0020000f0020000f0020000f0020000f00200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000198e000000000000000000040000000000000000000000fe880000000000000000000000000001fe8800000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000726f7365300000000000000000000000626f6e645f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f000180100000000000000000000000000000000000000000000000048006c696d69740000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000074e9d9e9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 21:07:45 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x41045508, 0x0) 21:07:45 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbb"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:45 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001804000000000000ec000000ec00400007fd4eb3e097000000000000000a0000050000003d0a04fb4179bcf5004f3a00f2ffffff00000000000063537113f3020000005000000000000000000000000000ed00000000000000af0000000000000000000000be079ec80e694e8f432760ebae9f00002b0a31d0e70000000000000006339f69dfadb72aaa3200006f34a7fa668bb9b302af9d7700737b8cba19d96e8d91e87758b0b120c7734953be0048bd07bc2317073e6825fbcfb768f8f5b1e994eeeb3005c6b457d4d285c882ca65a97b00882fee3498658a4009565f17972b79c5d054eee26fd8382b3a9f0fd92faf75354b2cf3feb628d0d37e395b0862ab8c9a34fe15ddbb713d3fed65c45e07894012752cb183e43f24882f8deff026259996351d589dfa0894f295a3b76da1c8dde41dbab19909a3ce7ea51fdd88dd6a8f4b9a66f62dcfb9048b511ce830bc0b25a4e1485b7b5901ce5a9372f83174af", @ANYRESDEC], 0x0, 0x179}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/77}, {&(0x7f00000001c0)=""/175}, {&(0x7f0000000000)=""/6}, {&(0x7f0000000280)=""/206}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:07:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0x0, 0x1a0, 0x1a0, 0x1a0, 0xd0, 0x298, 0x298, 0x298, 0x298, 0x298, 0x4, 0x0, {[{{@ipv6={@rand_addr="0dc263833b7311442c39b11ca62ccbea", @local, [], [], 'wg2\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast2}, [], [], 'rose0\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@dscp={{0x28, 'dscp\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) 21:07:45 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x41045508, 0x0) [ 506.345785][T16045] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:45 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbb"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:45 executing program 3: lsetxattr(&(0x7f0000fc0000)='./file1\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='user.u'], &(0x7f0000fc0000)='//selinux\x00\x00\x01\x01', 0xd, 0x3) 21:07:45 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x41045508, 0x0) [ 506.709479][T16064] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:45 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacb"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:46 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast1, 0x3fc}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @loopback}}}}], 0x28}}], 0x1, 0x0) [ 507.228015][T16077] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:46 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xfffffee3) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) 21:07:46 executing program 2: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x41045508, 0x0) 21:07:46 executing program 5: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x0, 0x0) 21:07:46 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x41, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000005) 21:07:48 executing program 0: 21:07:48 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacb"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:48 executing program 2: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x41045508, 0x0) 21:07:48 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, 0x0) 21:07:48 executing program 5: clone(0x13122001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) close(r0) 21:07:48 executing program 4: [ 509.390858][T16112] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:48 executing program 4: 21:07:48 executing program 2: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x41045508, 0x0) 21:07:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000c21eaf7696bb9ca9c23e5d08ea6400ec000000ec00400007fd4eb3e097000000000005000000000000617e6309000000000100002b5a04001b000000004f3a00f2fffff700000000000063537113f36534020000000000000000000000ed000000000000000000000000ee00000200000000000000000000000633b6ff07000000000000c987c216b0a6f543427e1b0f12c791dd9e7c1fb379e4613fe33d274b0ca679d68cb0cf3226f2c42fc1c60a98fda8d34b7e340b716446a8a58b42a14fee86ea959d615762a1aeb06c7e4eefeb720b08ae3dcb0130c78623cbfc6bf5d184b3346aaddb977f783d011f0a99301b19ff8027e353fad202691b8e9fb2090ef351558961acfa901562974c2a8c163a38f29d4e90c546f6d7b09a469b9defe317"], 0x0, 0x12c}, 0x20) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x3c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 21:07:48 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacb"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:48 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 21:07:48 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x4000000000000071, 0x28081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x41045508, 0x0) [ 509.877486][ T3571] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len 21:07:49 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x520, 0x0, 0x358, 0x0, 0x128, 0x0, 0x450, 0x450, 0x450, 0x450, 0x450, 0x4, 0x0, {[{{@ipv6={@local, @mcast2, [], [], 'rose0\x00', 'bridge_slave_1\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'hsr0\x00', {0x0, 0x0, 0x0, 0x8000000, 0x0, 0xf1, 0x7}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr="5b111bd336fe00010400", [], [], 'rose0\x00'}, 0x0, 0x208, 0x230, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@remote, @empty, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback, @local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, @dev, @loopback, @mcast1, @dev, @mcast2]}}, @common=@eui64={{0x28, 'eui64\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @empty, [], [], 'ip6gretap0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28, 'mh\x00'}, {"e2f6"}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) [ 510.030840][T16130] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe3"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:49 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x4000000000000071, 0x28081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x41045508, 0x0) 21:07:49 executing program 5: clone(0x13122001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x804}}) close(r0) 21:07:49 executing program 4: [ 510.628855][T16149] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:49 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x4000000000000071, 0x28081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x41045508, 0x0) 21:07:49 executing program 4: 21:07:50 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe3"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 511.335938][T16171] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:51 executing program 4: 21:07:51 executing program 3: 21:07:51 executing program 5: 21:07:51 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x28081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x41045508, 0x0) 21:07:51 executing program 0: 21:07:51 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe3"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 512.957747][T16181] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:52 executing program 5: 21:07:52 executing program 4: 21:07:52 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x28081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x41045508, 0x0) 21:07:52 executing program 3: 21:07:52 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:52 executing program 5: 21:07:52 executing program 0: 21:07:52 executing program 4: 21:07:52 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x28081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x41045508, 0x0) [ 513.572929][T16196] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:52 executing program 3: 21:07:52 executing program 0: 21:07:52 executing program 5: 21:07:52 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:53 executing program 3: 21:07:53 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x41045508, 0x0) 21:07:53 executing program 4: 21:07:53 executing program 5: [ 514.374819][T16215] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:53 executing program 3: 21:07:53 executing program 0: 21:07:53 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:54 executing program 3: 21:07:54 executing program 0: 21:07:54 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x41045508, 0x0) 21:07:54 executing program 5: [ 514.976839][T16227] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:54 executing program 4: 21:07:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:54 executing program 0: 21:07:54 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x41045508, 0x0) 21:07:54 executing program 4: 21:07:54 executing program 5: 21:07:54 executing program 3: [ 515.619399][T16243] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:54 executing program 0: 21:07:54 executing program 4: 21:07:55 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:55 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x41045508, 0x0) 21:07:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"/266], 0x1c}}, 0x0) 21:07:55 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000240007059b6f72141400000000000040", @ANYRES32=r1, @ANYBLOB="00000000ffffffff0001000007000100667100003400020008000a000000000008000100000000000800030040eb67928d68cb0080007e79b51e6bd5080008400c000008ffd824fde4b1560bfa837abf60279e2df35825d21cd2e103b03b5d9d0580b02cbcbbee8c6da40c60b230696714e89acaad8cab954b78a56b58249750e368c21f56d16cc4f81fc15605fa004000"], 0x60}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 21:07:55 executing program 0: r0 = socket$inet(0x2, 0x3, 0x0) bind$inet(r0, &(0x7f0000000000), 0x10) 21:07:55 executing program 4: perf_event_open(&(0x7f000025c000)={0x1000000002, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0}, &(0x7f0000cab000)=0x1) pidfd_open(r1, 0x0) 21:07:55 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x41045508, 0x0) [ 516.503886][T16263] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:55 executing program 5: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0xffffffffffffffff) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 21:07:55 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x9, 0x2000000000000009, 0x5, 0x0, 0x1}, 0x1f7) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r0, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000140), 0x0}, 0x20) 21:07:55 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:56 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x41045508, 0x0) 21:07:56 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001c00)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 21:07:56 executing program 4: perf_event_open(&(0x7f000025c000)={0x1000000002, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0}, &(0x7f0000cab000)=0x1) pidfd_open(r1, 0x0) 21:07:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"/266], 0x1c}}, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) [ 517.210326][T16293] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:56 executing program 3: mlockall(0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) [ 517.382651][ T33] audit: type=1400 audit(1584824876.427:86): avc: denied { read } for pid=16302 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 21:07:56 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) 21:07:56 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:56 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x41045508, 0x0) 21:07:56 executing program 5: truncate(&(0x7f0000000000)='.\x00', 0x0) 21:07:56 executing program 4: syz_emit_ethernet(0x5e, &(0x7f00000022c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a5b008", 0x28, 0x3a, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, [], @local, @empty}}}}}}, 0x0) 21:07:56 executing program 3: [ 517.827257][ T33] audit: type=1400 audit(1584824876.877:87): avc: denied { map } for pid=16316 comm="syz-executor.0" path="/dev/sg0" dev="devtmpfs" ino=17591 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:scsi_generic_device_t:s0 tclass=chr_file permissive=1 [ 517.882933][T16318] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:57 executing program 5: 21:07:57 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x41045508, 0x0) 21:07:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:57 executing program 0: 21:07:57 executing program 4: 21:07:57 executing program 3: 21:07:57 executing program 5: [ 518.450105][T16338] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:57 executing program 0: 21:07:57 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x41045508, 0x0) 21:07:57 executing program 3: 21:07:57 executing program 4: 21:07:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:58 executing program 0: 21:07:58 executing program 5: 21:07:58 executing program 3: 21:07:58 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x41045508, 0x0) 21:07:58 executing program 4: [ 519.290414][T16360] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:58 executing program 0: 21:07:58 executing program 3: 21:07:58 executing program 5: 21:07:58 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:58 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x41045508, 0x0) 21:07:58 executing program 4: 21:07:58 executing program 0: 21:07:59 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;!\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r2 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000200)={0x0, 0x800, 0x6}) [ 519.904674][T16378] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:59 executing program 3: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x8500) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 21:07:59 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x41045508, 0x0) 21:07:59 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:07:59 executing program 4: 21:07:59 executing program 0: 21:07:59 executing program 5: 21:07:59 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x41045508, 0x0) [ 520.575151][T16397] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:07:59 executing program 4: 21:07:59 executing program 0: open(&(0x7f0000000040)='./file0\x00', 0xd18d4464124e2294, 0x0) 21:07:59 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket(0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='0', 0x1, 0x4081, 0x0, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x1ff) close(r0) 21:07:59 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:08:00 executing program 5: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x8500) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 21:08:00 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r0}, 0xc) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='memory.high\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040), 0x12) [ 521.100343][T16413] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:08:00 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x41045508, 0x0) 21:08:00 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;!\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r2 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000200)) 21:08:00 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:08:00 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x41045508, 0x0) 21:08:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x7}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_type={0x1}]}, 0x58}}, 0x0) socket$key(0xf, 0x3, 0x2) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, 0x0) [ 521.724011][T16434] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:08:01 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 522.063341][ T33] audit: type=1800 audit(1584824881.117:88): pid=16425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=17475 res=0 21:08:01 executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001540)='/dev/dlm-control\x00', 0x0, 0x0) close(r0) 21:08:01 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x41045508, 0x0) 21:08:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000c21eaf7696bb9ca9c23e5d08ea6400ec000000ec00400007fd4eb3e097000000000005000000000000617e6309000000000100002b5a04001b000000004f3a00f2fffff700000000000063537113f36534020000000000000000000000ed000000000000000000000000ee00000200000000000000000000000633b6ff07000000000000c987c216b0a6f543427e1b0f12c791dd9e7c1fb379e4613fe33d274b0ca679d68cb0cf3226f2c42fc1c60a98fda8d34b7e340b716446a8a58b42a14fee86ea959d615762a1aeb06c7e4eefeb720b08ae3dcb0130c78623cbfc6bf5d184b3346aaddb977f783d011f0a99301b19ff8027e353fad202691b8e9fb209"], 0x0, 0x10a}, 0x20) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x3c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 522.337262][T16451] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:08:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/dev\x00') ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4c5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)=""/235, &(0x7f0000000080)=0xeb) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:08:01 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 522.839120][T16473] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:08:03 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r0}, 0xc) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='memory.high\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040), 0x12) 21:08:03 executing program 5: sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[]}}, 0x0) r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000140)='S', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r1, r1, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 21:08:03 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x41045508, 0x0) 21:08:03 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468000000001800020000000100", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:08:03 executing program 0: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x2, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) splice(r5, 0x0, r2, 0x0, 0x20000038, 0x0) splice(r5, 0x0, r1, 0x0, 0x20000038, 0x0) 21:08:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0xfffffffffffffffc, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 524.556908][T16488] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:08:03 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x41045508, 0x0) 21:08:03 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468000000001800020000000100", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:08:03 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x41045508, 0x0) [ 525.042338][T16506] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:08:04 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtaction={0x50, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x3c, 0x1, [@m_mirred={0x38, 0x1, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x4, r3}}]}, {0x4}}}]}]}, 0x50}}, 0x0) unlink(&(0x7f0000000040)='./file0\x00') 21:08:04 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x270, 0x0, 0x0, 0x0, 0x108, 0x108, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73], 0x0, 0xa0, 0x108, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0xfffffffe, 0x0, 0x0, 0x0, 0x5}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d0) 21:08:04 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468000000001800020000000100", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 525.725461][T16515] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 527.154466][ T0] NOHZ: local_softirq_pending 08 21:08:09 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') recvmmsg(0xffffffffffffffff, &(0x7f00000027c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 21:08:09 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x41045508, 0x0) 21:08:09 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200000001000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:08:09 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) fchown(r0, 0x0, 0x0) 21:08:09 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) 21:08:09 executing program 0: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x3, 0x0) dup3(r0, r1, 0x0) [ 530.912465][T16533] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 530.919664][T16534] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:08:10 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) shmget(0x1, 0xd000, 0x2, &(0x7f0000ff1000/0xd000)=nil) [ 530.992677][T16539] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? 21:08:10 executing program 0: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e5e, @dev}, 0x10) sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 21:08:10 executing program 3: socket$unix(0x1, 0x1, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x541b) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f0000000140)='\x00') 21:08:10 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200000001000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:08:10 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x41045508, 0x0) [ 531.425618][T16556] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:08:10 executing program 3: sync() symlink(&(0x7f0000000080)='./file2\x00', &(0x7f00000000c0)='./file0\x00') rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000000)='./file2\x00') rename(&(0x7f0000000940)='./file2/file1\x00', &(0x7f0000000980)='./file2\x00') shmctl$SHM_INFO(0x0, 0xe, 0x0) 21:08:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0xc9e10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)}, 0x20000004) 21:08:16 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000024000505d20680648c63946b0424fc60040012400a001100053582c137153e370907088000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 21:08:16 executing program 0: r0 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, 0x0, 0x0) 21:08:16 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200000001000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:08:16 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 21:08:16 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x41045508, 0x0) [ 537.628499][T16578] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:08:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) sendmmsg(r0, &(0x7f00000007c0)=[{{&(0x7f0000000240)=@nl=@unspec, 0x80, 0x0}}], 0x1, 0x20000000) 21:08:16 executing program 5: sync() rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000540)='./file1\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) bind(r2, &(0x7f0000000140)=@un=@file={0x1, './file0\x00'}, 0x14) 21:08:16 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468000000001800020000000100000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:08:16 executing program 3: r0 = eventfd(0xdffffffe) write$9p(r0, &(0x7f00000000c0)="a3b787ca937f15a7", 0x8) r1 = gettid() close(r0) timer_create(0x0, &(0x7f0000000780)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e5e, @dev}, 0x10) tkill(r1, 0x13) 21:08:16 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x41045508, 0x0) 21:08:17 executing program 0: sync() symlink(&(0x7f0000000080)='./file2\x00', &(0x7f00000000c0)='./file0\x00') rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000000)='./file2\x00') shmctl$SHM_INFO(0x0, 0xe, 0x0) removexattr(&(0x7f0000000200)='./file2/file1\x00', 0x0) [ 538.126252][T16597] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:08:22 executing program 4: 21:08:22 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468000000001800020000000100000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:08:22 executing program 3: 21:08:22 executing program 5: 21:08:22 executing program 0: 21:08:22 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x41045508, 0x0) 21:08:23 executing program 0: [ 544.040724][T16618] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:08:23 executing program 3: 21:08:23 executing program 5: 21:08:23 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468000000001800020000000100000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:08:23 executing program 0: 21:08:23 executing program 2: 21:08:23 executing program 3: [ 544.529584][T16635] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:08:27 executing program 4: 21:08:27 executing program 5: 21:08:27 executing program 2: 21:08:27 executing program 0: 21:08:27 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:08:27 executing program 3: 21:08:27 executing program 5: 21:08:27 executing program 2: [ 548.543501][T16652] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:08:27 executing program 0: 21:08:27 executing program 3: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x8500) 21:08:27 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:08:27 executing program 2: unshare(0x6c060000) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00'], 0x1}}, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0200fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740c00000000d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}}) [ 549.003561][T16665] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 549.128303][T16671] IPVS: ftp: loaded support on port[0] = 21 [ 549.336375][T16671] netlink: 40067 bytes leftover after parsing attributes in process `syz-executor.2'. [ 549.957074][T16677] netlink: 40067 bytes leftover after parsing attributes in process `syz-executor.2'. [ 550.212009][ T1307] tipc: TX() has been purged, node left! [ 551.463169][ T0] NOHZ: local_softirq_pending 08 21:08:31 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 21:08:31 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_THP_DISABLE(0x29, 0x1) 21:08:31 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x1cb) sendmmsg$inet(r0, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)="fa", 0x1}, {&(0x7f0000000180)="f8641a4e6404e84ca5", 0x9}, {&(0x7f00000000c0)="f9124494004235434aad0a9e4f9c73095579863905ca9a5217add9aa5fec", 0x1e}, {&(0x7f00000002c0)="8a879a222788fc609f9f7ee71e35ebf9ef6d1e5d6ed3cc422f1cf8efdf32ea878de9df1b6cf0e48744f841c08350595ad71e90cc74727a3a04e1714cdb24eff3fab407539998c9dfd6d93f5023b2a3f969ec6eb25ca0c3cc548ab89ad53ba59cd64a9bfc395de750e0f3237af2080dc576ead3532bf1382fd6b472c722b5ef1c972f6347f73b44b0270be768185c8ed185eb49fb545446d22ffd923245922c4f8c8f7488f450abf259ba289dad", 0xad}, {&(0x7f0000001b00)="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", 0x4c0}], 0x5}}, {{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000000380)="b58fc9e124ad9f326fbbd188298a84e9c983700e0f63c8bf1c1b9a1e", 0x1c}, {&(0x7f0000000500)="98", 0x1}], 0x2}}], 0x2, 0x4000000) 21:08:31 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 21:08:31 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:08:31 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040)=0x7d, 0x4) [ 552.784178][T16682] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 21:08:31 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070002053c27bc3376003639405cb4aed12f0000000000ae47a825d868002736460234432479aed75d492b415bcee0f0fc00008e99adaf000000000000000000000000fd6d802d0b290e69758009cb0735fad06b81b8eee59e2efeb55e420e8d18c29b942293b2ce623f47991bd9db11d0d7a44e2c99829e8d1644089d39a38da0675765ee2bb40983d577dcd14aadfce41ce65316be15221a6e496bcb4a4f40abda9f69d070", 0xa8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 552.858811][T16689] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 552.919548][T16682] syz-executor.0 (16682) used greatest stack depth: 2704 bytes left 21:08:32 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:08:32 executing program 5: unshare(0x6c060000) socket$inet6(0x10, 0x3, 0x0) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0xc800) shmctl$IPC_RMID(0x0, 0x0) r0 = shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x7000) shmdt(r0) 21:08:32 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c260d927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 21:08:32 executing program 0: r0 = socket$inet(0x2, 0x2, 0x2000000088) bind(r0, &(0x7f0000e79ff0)=@in={0x2, 0x4e20}, 0x10) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) [ 553.260328][T16709] IPVS: ftp: loaded support on port[0] = 21 [ 553.295264][T16708] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 553.397049][T16708] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:08:32 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 553.671049][T16723] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 553.722746][T16723] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 553.770007][T11908] tipc: TX() has been purged, node left! 21:08:39 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f00000003c0)) 21:08:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000002540)=[{0x0}, {0x0}, {&(0x7f0000003800)=""/4100, 0xffffff5f}], 0x3, 0x0, 0x17b, 0x3e8}, 0x0) write$binfmt_elf64(r0, &(0x7f0000001ec0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYPTR64=&(0x7f0000000cc0)=ANY=[@ANYBLOB="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"/317, @ANYBLOB="bfc98e8192cb0a9e79f202741d6b35b9407b516de574e75eb6e7707a648644a46401010000000000003c0304e0d899911dc395259c95e4705bc32dc636cc049b3fcc8bb534aee4d921483f4baa0f3b0cab0034667d446489d000", @ANYPTR64=&(0x7f0000000740)=ANY=[@ANYRES64, @ANYRES64, @ANYRESHEX=0x0, @ANYPTR], @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYRESHEX=0x0, @ANYRESOCT, @ANYRES64, @ANYRESHEX], @ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64, @ANYRES32, @ANYBLOB="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", @ANYBLOB="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"], 0x100000475) 21:08:39 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000080)) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x7, 0xc15a, 0x7, 0x2, 0xf}}) sendfile(r0, r0, 0x0, 0xff) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x9, 0x3, 0x5, &(0x7f0000000000)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000010c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="200025bd7000ffdbdf2507000000080039000200000008002b00fdd2ffff0600280003000000cf391f07f652ab6220fd85c821617792b357181b99448e7e623e47567500dfb6947408a686a99d7810114a0d24a67d3ff506f3b46c7dfdc4e4659d5be6058fd983ae3f9821d241c9acc1448dc6ef2bccb7584cd41611e79465dc45ab6afaf223caab09022ac916bbb61fa559"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0xd0) 21:08:39 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000040)) 21:08:39 executing program 2: sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001800)={0xe8, 0x14, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0xd1, 0x1, "a0afbc75d0985795d4819df43c7f84ae4e8befc8bb06c6c6ca6a028f72951beeeb6f43d5d0eb9648043d88a92e6afa0a89de8c67cbc789866dcd3e5d0a5f58022ba63524007e48237e915832a12036141bfd6b6abdd6f920af478d35f2f8549f088cd7381ecf48cbc5b32ee3dfa91c9ea54e2cc22ad69602bbe5d5f6d10a26ab8cc1c701428b968dd1fc88942856cfc3df35bf517f2be32105dc8f2b409196efa421fc9cc3d41b87d9f4defb634e3aea1c82baa924229bbfc48affb8762ffd69589946a1f699b85e6867d0312f"}]}, 0xe8}}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0xffdf}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r0, &(0x7f0000000280)=""/4096, 0x1000) 21:08:39 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 560.307537][T16736] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:08:39 executing program 5: syz_emit_ethernet(0x66, &(0x7f00000001c0)={@local, @random="0b020000ee73", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x32, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) [ 560.343848][T16736] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:08:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000000)={0xd2}) 21:08:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x48}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x7, 0x0, 0x80, 0x24000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:08:39 executing program 3: syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000010000)='XFSB', 0xffffffffffffffbf}, {&(0x7f0000000480)="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", 0x1f9, 0x7}], 0x8080, 0x0) 21:08:39 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:08:39 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x5, 0x9, 0x7, 0xbf, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000200), &(0x7f0000000100)}, 0x20) creat(&(0x7f0000000680)='./bus\x00', 0x0) r1 = socket(0x2000000000000021, 0x2, 0x0) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) r2 = open(&(0x7f0000000140)='./bus\x00', 0x8000000141042, 0x0) write$evdev(r2, &(0x7f0000000100)=[{{}, 0x0, 0xf00}], 0x18) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1410, 0x10, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x50) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="19000000000000001c0012000c00010062726964676500000c0002000800050001000000"], 0x3c}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) socket(0x8, 0x4, 0x5) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000040)={0x20}) 21:08:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, &(0x7f0000000240)="2ef43b126fb572a2ce59e788a27e4470a53a881c0fc436b1979acb1fd2759c002e22e844d4c1152b6c56224d49962066fc136ff5234bae319fdb13fccfb6b8a613f3d9a522b3a941d88631241ede786e84c22d0112dcffa690cd1bfb3170513e3bf7aa139fe1989b5365c4047a935e79f392f61beeb7dc9bb22c3fe0e2ecc040c93f0a510d", 0x85) [ 561.021401][T16769] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 562.983817][ T0] NOHZ: local_softirq_pending 08 21:08:45 executing program 4: mknod$loop(&(0x7f0000000080)='./file1\x00', 0x0, 0xffffffffffffffff) rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000280)='./file0\x00') 21:08:45 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:08:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x2001001, 0x0) mount$bpf(0x20000000, &(0x7f0000000140)='./file0/file0/file0\x00', 0x0, 0xc50c4, 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x5890, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) 21:08:45 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x3, 0x0, 0x0) 21:08:45 executing program 5: 21:08:45 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x0}, 0x10) [ 566.721079][T16800] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:08:45 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{}], 0x8) 21:08:45 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x3, 0x0, 0x0) 21:08:46 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:08:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket(0x10, 0x2, 0x0) sendto(r1, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0) 21:08:46 executing program 5: mknod(&(0x7f0000000340)='./bus\x00', 0x0, 0x0) unlink(&(0x7f0000000100)='./bus\x00') [ 567.193723][T16812] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:08:46 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x3, 0x0, 0x0) 21:08:49 executing program 5: 21:08:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:08:49 executing program 4: 21:08:49 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x3, 0x0, 0x0) 21:08:49 executing program 3: 21:08:49 executing program 0: [ 570.989765][T16836] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:08:50 executing program 0: 21:08:50 executing program 5: 21:08:50 executing program 2: setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) 21:08:50 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:08:50 executing program 3: [ 571.324985][ T3571] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len 21:08:50 executing program 0: 21:08:50 executing program 5: [ 571.468368][T16849] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:08:54 executing program 4: socket$inet6(0xa, 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 21:08:54 executing program 3: 21:08:54 executing program 2: setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) 21:08:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:08:54 executing program 5: 21:08:54 executing program 0: [ 575.355439][T16866] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:08:54 executing program 3: syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @random="2a4074b3e58f", @void, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @empty, "", @link_local}}}}, 0x0) 21:08:54 executing program 2: setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) 21:08:54 executing program 0: syz_open_dev$loop(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, 0x0) getpid() ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x1}) prctl$PR_SET_PDEATHSIG(0x1, 0x17) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) write$binfmt_script(r1, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x14569d0eeb5fa152, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28031, 0xffffffffffffffff, 0x0) r2 = add_key$user(&(0x7f0000000bc0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="3274a95d03b6474e2ac1ae43123a5ce9d233cc1b8e1e0923cf90d7ca0b70bb43df0b44672093962113544e43a76ba7c63ed6b7efc1812335e62d1ed2641cc929e104d19b2082b6a799f98575389a6612467040f0e3a06f751c9483831d997a74d4848f3071dcbaa929b0d050391599e86ae41fd7282c606597ea358f74e1fdc09ac8beef54d5d479f4cf5dc234e27de558840896e6696b048bbdb04318e14e6affcb14562e15c2226fd08d73f24a48933f7d04faa245a279e30ecec83828c44cfae9400ed431400e05d863", 0xcb}, {0x0}, {&(0x7f00000006c0)}], 0x3, r2) 21:08:54 executing program 5: r0 = shmget(0x0, 0x1000, 0x780012c9, &(0x7f0000ffa000/0x1000)=nil) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmctl$IPC_RMID(r0, 0x0) 21:08:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:08:54 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="6653070000053c27bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e651996156", 0x52}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x19) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 575.856435][T16882] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 576.436171][ T0] NOHZ: local_softirq_pending 08 21:08:58 executing program 4: syz_open_procfs(0x0, &(0x7f00000000c0)='net/raw\x00') r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 21:08:58 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x20) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e2c, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 21:08:58 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) 21:08:58 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:08:58 executing program 0: fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000180)='./file0\x00', 0x14107e, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYRESDEC=0x0], 0x14) 21:08:58 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0xfffffffd, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 579.975918][T16908] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:08:59 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) 21:08:59 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 21:08:59 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:08:59 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) 21:08:59 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) [ 580.659365][T16925] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:08:59 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 581.254189][T16939] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:09:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000c21eaf7696bb9ca9c23e5d08ea6400ec000000ec00400007fd4eb3e097000000000005000000000000617e6309000000000100002b5a04001b000000004f3a00f2fffff700000000000063537113f36534020000000000000000000000ed000000000000000000000000ee00000200000000000000000000000633b6ff07000000000000c987c216b0a6f543427e1b0f12c791dd9e7c1fb379e4613fe33d274b0ca679d68cb0cf3226f2c42fc1c60a98fda8d34b7e340b716446a8a58b42a14fee86ea959d615762a1aeb06c7e4eefeb720b08ae3dcb"], 0x0, 0xe1}, 0x20) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x3c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 21:09:06 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 21:09:06 executing program 2: socket$inet6(0xa, 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x81}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) 21:09:06 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:09:06 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) dup3(r2, r3, 0x0) dup2(r1, r4) 21:09:06 executing program 5: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB='type=y']) [ 587.239456][T16952] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 587.243132][T16956] hfs: type requires a 4 character value [ 587.253506][T16956] hfs: unable to parse mount options [ 587.386153][T16956] hfs: type requires a 4 character value [ 587.392357][T16956] hfs: unable to parse mount options 21:09:06 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 21:09:06 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:09:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCL_PASTESEL(r1, 0x541c, 0x0) 21:09:06 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) [ 587.731554][T16971] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:09:06 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) 21:09:07 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 588.174988][T16983] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:09:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001800050200000000000000000a000000", @ANYRES32, @ANYBLOB="00000a00140001001800000063f1aac2000000000000000000000001"], 0x30}}, 0x0) 21:09:10 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) 21:09:10 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:09:10 executing program 2: socket$inet6(0xa, 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x81}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) 21:09:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x48}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) socket(0x10, 0x80002, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@remote, @in6=@local}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000080)=0xe8) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:09:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) [ 591.723951][T17001] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:09:10 executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 21:09:10 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:09:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 21:09:11 executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 21:09:11 executing program 5: [ 592.205021][T17018] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:09:11 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:09:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) [ 592.535133][T17027] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 594.342489][ T0] NOHZ: local_softirq_pending 08 [ 598.182549][ T0] NOHZ: local_softirq_pending 08 21:09:19 executing program 4: 21:09:19 executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 21:09:19 executing program 5: 21:09:19 executing program 2: socket$inet6(0xa, 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x81}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) 21:09:19 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:09:19 executing program 3: 21:09:19 executing program 3: 21:09:19 executing program 0: sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) [ 600.156301][T17046] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:09:19 executing program 5: 21:09:19 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:09:19 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01df0f300f32d9e90f086665676426f7c5000000000f2245deef1e03e5", 0x23}], 0x1, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000", 0x4f}], 0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000), 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cc], 0x10000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 600.503189][T17058] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:09:19 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/70, 0x46}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 600.849671][T17062] kvm [17060]: vcpu0, guest rIP: 0x48 Hyper-V unhandled wrmsr: 0x40000004 data 0x0 [ 600.886439][T17062] kvm [17060]: vcpu0, guest rIP: 0x48 Hyper-V unhandled wrmsr: 0x40000004 data 0x0 [ 600.925609][T17062] kvm [17060]: vcpu0, guest rIP: 0x48 Hyper-V unhandled wrmsr: 0x40000004 data 0x0 [ 600.947374][T17062] kvm [17060]: vcpu0, guest rIP: 0x48 Hyper-V unhandled wrmsr: 0x40000004 data 0x0 [ 600.975292][T17062] kvm [17060]: vcpu0, guest rIP: 0x48 Hyper-V unhandled wrmsr: 0x40000004 data 0x0 [ 601.002832][T17062] kvm [17060]: vcpu0, guest rIP: 0x48 Hyper-V unhandled wrmsr: 0x40000004 data 0x0 [ 601.017313][T17062] kvm [17060]: vcpu0, guest rIP: 0x48 Hyper-V unhandled wrmsr: 0x40000004 data 0x0 [ 601.028793][T17062] kvm [17060]: vcpu0, guest rIP: 0x48 Hyper-V unhandled wrmsr: 0x40000004 data 0x0 [ 601.038797][T17062] kvm [17060]: vcpu0, guest rIP: 0x48 Hyper-V unhandled wrmsr: 0x40000004 data 0x0 [ 601.060693][T17062] kvm [17060]: vcpu0, guest rIP: 0x48 Hyper-V unhandled wrmsr: 0x40000004 data 0x0 21:09:25 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20986100, 0x0, 0x0, 0x0, &(0x7f0000000040)="d353ff072d68b2e4dc14aa5f7e25908384") 21:09:25 executing program 0: sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 21:09:25 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 21:09:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='htcp\x00', 0x76) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14141b}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) 21:09:25 executing program 5: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000000)={0x0, 0x117, &(0x7f0000000040)=[{&(0x7f00000000c0)="24000000180007841dfffd946f610500020f81001f038b0506000800080012000200ff7e280000001100ffffba16a0aa1c0900000000000012fffff0000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 21:09:25 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01df0f300f32d9e90f086665676426f7c5000000000f2245deef1e03e5", 0x23}], 0x1, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x100, 0x40000004, 0x0, 0x0, 0x0, 0x4cc], 0x10000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 606.380303][T17076] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 606.460672][T17084] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 606.474735][T17086] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:09:25 executing program 3: socket$inet6(0xa, 0x2, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000009904000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0) [ 606.501390][T17084] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:09:25 executing program 0: sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 21:09:25 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 606.681398][T17085] kvm_hv_set_msr: 374 callbacks suppressed [ 606.688742][T17085] kvm [17082]: vcpu0, guest rIP: 0x48 Hyper-V unhandled wrmsr: 0x40000004 data 0x0 21:09:25 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 606.808380][T17085] kvm [17082]: vcpu0, guest rIP: 0x48 Hyper-V unhandled wrmsr: 0x40000004 data 0x0 21:09:25 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) [ 606.879209][T17085] kvm [17082]: vcpu0, guest rIP: 0x48 Hyper-V unhandled wrmsr: 0x40000004 data 0x0 [ 606.942988][T17102] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 606.953025][T17085] kvm [17082]: vcpu0, guest rIP: 0x48 Hyper-V unhandled wrmsr: 0x40000004 data 0x0 [ 607.010533][T17102] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 607.043147][T17085] kvm [17082]: vcpu0, guest rIP: 0x48 Hyper-V unhandled wrmsr: 0x40000004 data 0x0 [ 607.064367][T17085] kvm [17082]: vcpu0, guest rIP: 0x48 Hyper-V unhandled wrmsr: 0x40000004 data 0x0 [ 607.106757][T17085] kvm [17082]: vcpu0, guest rIP: 0x48 Hyper-V unhandled wrmsr: 0x40000004 data 0x0 [ 607.163923][T17093] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 607.174405][T17093] EXT4-fs (loop3): group descriptors corrupted! [ 607.187169][T17085] kvm [17082]: vcpu0, guest rIP: 0x48 Hyper-V unhandled wrmsr: 0x40000004 data 0x0 [ 607.197563][T17085] kvm [17082]: vcpu0, guest rIP: 0x48 Hyper-V unhandled wrmsr: 0x40000004 data 0x0 21:09:26 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 607.207920][T17085] kvm [17082]: vcpu0, guest rIP: 0x48 Hyper-V unhandled wrmsr: 0x40000004 data 0x0 [ 607.568791][T17121] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 607.584532][T17121] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:09:32 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000140)="ae", 0x1}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f0000001840)="0c268a927f1f6588b967481241ba78607f48f65ac618ded8f9ee455aa306000000abeaf4b4834ff922b3f1e0b02bd64d07f46061c14a47448abce2f87acbf6ae8d78ee9127104b7659dd03a83059bcecc7a90325a3a07e758044ab4ea6f7ae55d88ffb000000000000006bec66ba7e03f587e3df240f61", 0xfe6a, 0x0, 0x0, 0xffffff34) 21:09:32 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) 21:09:32 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$pokeuser(0x6, r1, 0x0, 0x0) 21:09:32 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 21:09:32 executing program 2: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) 21:09:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) dup(0xffffffffffffffff) io_setup(0x0, 0x0) io_submit(0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000009904000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0) [ 613.859449][T17139] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:09:33 executing program 2: [ 613.936327][T17139] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:09:33 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) 21:09:33 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 21:09:33 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x5, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd06, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 614.299842][T17145] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 614.309930][T17145] EXT4-fs (loop5): group descriptors corrupted! 21:09:33 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) [ 614.488552][T17164] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 614.537630][T17164] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:09:33 executing program 5: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xa7f}, 0x14007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000280)='./file0\x00', 0x8, 0x2) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0xb, 0x0, "98d3340600c7aa11897ecaab876eab7957688dc5656be8410f2802e944af9b373be2666b66577017e1e49e64907d5dd5749393ad08f139a68f00"}, 0xd8) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xffe00000}, {0x80000006}]}, 0x10) 21:09:34 executing program 3: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x280000b, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x41081fc) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000003c80), 0x4) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 21:09:38 executing program 4: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xa7f}, 0x14007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000280)='./file0\x00', 0x8, 0x2) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0xb, 0x0, "98d3340600c7aa11897ecaab876eab7957688dc5656be8410f2802e944af9b373be2666b66577017e1e49e64907d5dd5749393ad08f139a68f00"}, 0xd8) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xffe00000}, {0x80000006}]}, 0x10) 21:09:38 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 21:09:38 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) 21:09:38 executing program 2: memfd_create(0x0, 0x4) mmap(&(0x7f0000200000/0x400000)=nil, 0x7ffffffff000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2008002) keyctl$get_keyring_id(0x0, 0x0, 0x0) getgroups(0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x80000001, 0x2, 0x0, 0x80000001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) sendfile(r0, r1, 0x0, 0x8482) 21:09:38 executing program 3: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x280000b, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x41081fc) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000003c80), 0x4) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 21:09:38 executing program 5: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xa7f}, 0x14007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000280)='./file0\x00', 0x8, 0x2) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0xb, 0x0, "98d3340600c7aa11897ecaab876eab7957688dc5656be8410f2802e944af9b373be2666b66577017e1e49e64907d5dd5749393ad08f139a68f00"}, 0xd8) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xffe00000}, {0x80000006}]}, 0x10) [ 618.908160][T17195] ptrace attach of "/root/syz-executor.4"[12584] was attempted by "/root/syz-executor.4"[17195] [ 619.159444][T17207] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 21:09:38 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) [ 619.248382][T17207] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:09:38 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, &(0x7f0000000400)=""/24, 0x18}, 0x40000060) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000033000502f0598064716356c10224fc44543fa8000a000a00053582c1b0a8ea8b090009801302127ad1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e3fb4599c9b7cbbeeeacbe34a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) [ 619.407437][ T33] audit: type=1800 audit(1584824978.457:89): pid=17210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16817 res=0 21:09:38 executing program 3: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x280000b, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x41081fc) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000003c80), 0x4) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 21:09:38 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:09:38 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x3, 0x400280) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000140)) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @local}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0x3e8}, 0x100) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 619.766505][T17220] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 619.812250][T17220] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 619.998082][T17227] ===================================================== [ 620.005075][T17227] BUG: KMSAN: kernel-infoleak in kmsan_copy_to_user+0x81/0x90 [ 620.012636][T17227] CPU: 1 PID: 17227 Comm: syz-executor.2 Not tainted 5.6.0-rc6-syzkaller #0 [ 620.021426][T17227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 620.031476][T17227] Call Trace: [ 620.034778][T17227] dump_stack+0x1c9/0x220 [ 620.039125][T17227] kmsan_report+0xf7/0x1e0 [ 620.043569][T17227] kmsan_internal_check_memory+0x238/0x3d0 [ 620.049418][T17227] kmsan_copy_to_user+0x81/0x90 [ 620.056016][T17227] _copy_to_user+0x15a/0x1f0 [ 620.060615][T17227] tty_compat_ioctl+0x1482/0x1850 [ 620.065649][T17227] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 620.071478][T17227] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 620.077283][T17227] ? tty_poll+0x4b0/0x4b0 [ 620.081839][T17227] __se_compat_sys_ioctl+0x57c/0xed0 [ 620.087144][T17227] ? kmsan_get_metadata+0x4f/0x180 [ 620.092267][T17227] __ia32_compat_sys_ioctl+0xd9/0x110 [ 620.097643][T17227] ? compat_ptr_ioctl+0x150/0x150 [ 620.102711][T17227] do_fast_syscall_32+0x3c7/0x6e0 [ 620.107747][T17227] entry_SYSENTER_compat+0x68/0x77 [ 620.112851][T17227] RIP: 0023:0xf7faad99 [ 620.116921][T17227] Code: 90 e8 0b 00 00 00 f3 90 0f ae e8 eb f9 8d 74 26 00 89 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 620.136563][T17227] RSP: 002b:00000000f5da50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 620.144992][T17227] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000541e [ 620.153173][T17227] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 620.161178][T17227] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 620.169149][T17227] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 620.177109][T17227] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 620.185091][T17227] [ 620.187411][T17227] Local variable ----v32.i105@tty_compat_ioctl created at: [ 620.195213][T17227] tty_compat_ioctl+0xf12/0x1850 [ 620.200139][T17227] tty_compat_ioctl+0xf12/0x1850 [ 620.205423][T17227] [ 620.208797][T17227] Bytes 50-51 of 60 are uninitialized [ 620.214501][T17227] Memory access of size 60 starts at ffffaf9c454d3ce0 [ 620.221250][T17227] Data copied to user address 0000000020000040 [ 620.227389][T17227] ===================================================== [ 620.234488][T17227] Disabling lock debugging due to kernel taint [ 620.240810][T17227] Kernel panic - not syncing: panic_on_warn set ... [ 620.247585][T17227] CPU: 1 PID: 17227 Comm: syz-executor.2 Tainted: G B 5.6.0-rc6-syzkaller #0 [ 620.258153][T17227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 620.268196][T17227] Call Trace: [ 620.271484][T17227] dump_stack+0x1c9/0x220 [ 620.276508][T17227] panic+0x3d5/0xc3e [ 620.280448][T17227] kmsan_report+0x1df/0x1e0 [ 620.284968][T17227] kmsan_internal_check_memory+0x238/0x3d0 [ 620.294709][T17227] kmsan_copy_to_user+0x81/0x90 [ 620.299563][T17227] _copy_to_user+0x15a/0x1f0 [ 620.304170][T17227] tty_compat_ioctl+0x1482/0x1850 [ 620.309189][T17227] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 620.315028][T17227] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 620.320918][T17227] ? tty_poll+0x4b0/0x4b0 [ 620.325247][T17227] __se_compat_sys_ioctl+0x57c/0xed0 [ 620.330538][T17227] ? kmsan_get_metadata+0x4f/0x180 [ 620.335650][T17227] __ia32_compat_sys_ioctl+0xd9/0x110 [ 620.341111][T17227] ? compat_ptr_ioctl+0x150/0x150 [ 620.346178][T17227] do_fast_syscall_32+0x3c7/0x6e0 [ 620.351238][T17227] entry_SYSENTER_compat+0x68/0x77 [ 620.356512][T17227] RIP: 0023:0xf7faad99 [ 620.360575][T17227] Code: 90 e8 0b 00 00 00 f3 90 0f ae e8 eb f9 8d 74 26 00 89 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 620.380440][T17227] RSP: 002b:00000000f5da50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 620.389639][T17227] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000541e [ 620.397599][T17227] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 620.405654][T17227] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 620.413623][T17227] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 620.421584][T17227] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 620.430184][T17227] ------------[ cut here ]------------ [ 620.435798][T17227] kernel BUG at mm/kmsan/kmsan.h:87! [ 620.441286][T17227] invalid opcode: 0000 [#1] SMP [ 620.446388][T17227] CPU: 1 PID: 17227 Comm: syz-executor.2 Tainted: G B 5.6.0-rc6-syzkaller #0 [ 620.457550][T17227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 620.468663][T17227] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 620.475230][T17227] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 a6 44 48 91 31 c0 e8 61 78 48 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 82 96 48 ff 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 620.496350][T17227] RSP: 0018:ffffaf9c454d3748 EFLAGS: 00010046 [ 620.502402][T17227] RAX: 0000000000000002 RBX: 00000000060c00b2 RCX: 00000000060c00b2 [ 620.510352][T17227] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffaf9c454d3824 [ 620.520221][T17227] RBP: ffffaf9c454d37f0 R08: 0000000000000000 R09: ffffa12e2fd28ed0 [ 620.529493][T17227] R10: 0000000000000000 R11: ffffffff8821cea0 R12: 0000000000000000 [ 620.537948][T17227] R13: 0000000000000001 R14: 0000000000000006 R15: 0000000000000001 [ 620.547412][T17227] FS: 0000000000000000(0000) GS:ffffa12e2fd00000(0063) knlGS:00000000f5da5b40 [ 620.557279][T17227] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 620.564116][T17227] CR2: 0000000008158000 CR3: 000000010bcec000 CR4: 00000000001406e0 [ 620.572082][T17227] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 620.580042][T17227] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 620.588249][T17227] Call Trace: [ 620.591536][T17227] kmsan_check_memory+0xd/0x10 [ 620.596296][T17227] iowrite8+0x99/0x2e0 [ 620.600365][T17227] pvpanic_panic_notify+0x99/0xc0 [ 620.605464][T17227] ? pvpanic_mmio_remove+0x60/0x60 [ 620.610559][T17227] atomic_notifier_call_chain+0x12a/0x240 [ 620.616261][T17227] panic+0x468/0xc3e [ 620.620154][T17227] kmsan_report+0x1df/0x1e0 [ 620.624654][T17227] kmsan_internal_check_memory+0x238/0x3d0 [ 620.630463][T17227] kmsan_copy_to_user+0x81/0x90 [ 620.635310][T17227] _copy_to_user+0x15a/0x1f0 [ 620.639908][T17227] tty_compat_ioctl+0x1482/0x1850 [ 620.644924][T17227] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 620.650740][T17227] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 620.656616][T17227] ? tty_poll+0x4b0/0x4b0 [ 620.664782][T17227] __se_compat_sys_ioctl+0x57c/0xed0 [ 620.670071][T17227] ? kmsan_get_metadata+0x4f/0x180 [ 620.675194][T17227] __ia32_compat_sys_ioctl+0xd9/0x110 [ 620.680552][T17227] ? compat_ptr_ioctl+0x150/0x150 [ 620.685570][T17227] do_fast_syscall_32+0x3c7/0x6e0 [ 620.690595][T17227] entry_SYSENTER_compat+0x68/0x77 [ 620.695687][T17227] RIP: 0023:0xf7faad99 [ 620.699738][T17227] Code: 90 e8 0b 00 00 00 f3 90 0f ae e8 eb f9 8d 74 26 00 89 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 620.719510][T17227] RSP: 002b:00000000f5da50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 620.728188][T17227] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000541e [ 620.736184][T17227] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 620.744225][T17227] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 620.752195][T17227] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 620.760168][T17227] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 620.774141][T17227] Modules linked in: [ 620.778037][T17227] ---[ end trace 7bfdff6ca16445b8 ]--- [ 620.783480][T17227] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 620.793780][T17227] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 a6 44 48 91 31 c0 e8 61 78 48 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 82 96 48 ff 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 620.814059][T17227] RSP: 0018:ffffaf9c454d3748 EFLAGS: 00010046 [ 620.820111][T17227] RAX: 0000000000000002 RBX: 00000000060c00b2 RCX: 00000000060c00b2 [ 620.828104][T17227] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffaf9c454d3824 [ 620.836081][T17227] RBP: ffffaf9c454d37f0 R08: 0000000000000000 R09: ffffa12e2fd28ed0 [ 620.844296][T17227] R10: 0000000000000000 R11: ffffffff8821cea0 R12: 0000000000000000 [ 620.852510][T17227] R13: 0000000000000001 R14: 0000000000000006 R15: 0000000000000001 [ 620.860464][T17227] FS: 0000000000000000(0000) GS:ffffa12e2fd00000(0063) knlGS:00000000f5da5b40 [ 620.869392][T17227] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 620.875956][T17227] CR2: 0000000008158000 CR3: 000000010bcec000 CR4: 00000000001406e0 [ 620.885154][T17227] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 620.893225][T17227] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 620.901177][T17227] Kernel panic - not syncing: Fatal exception [ 620.909512][T17227] Kernel Offset: 0x2000000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 620.921051][T17227] Rebooting in 86400 seconds..