7dcb68262f4d4a0c7bc32b55be9f46d89dffca75b17da581a7d1253a833e91e2e21fbea07ff827f96e431f89ce8c481dd20804a0c5fd71b98052ce5e8722cf9ff65234593e93d36c827eaac2fdfbd983675ded2ccaf53b31aa887ee8a7977617a88032ea50beb91a2fe0c33d27a12a1a01a4eb42c6335bb0575c22374a99211221c46125739e9051476244e51d19a9cda1eba075b6dc69c0fa962e10ffeca035b39a1a6013990d90a46af28", 0x1000}, {&(0x7f0000003f40)="0d45dbe102e1c99a16243d7065c30eb1de9c1a5d8807aeeb124eecb9ff1ce1adb3091a16", 0x24}, {&(0x7f0000003f80)="4da8e17fd79bcfdf471cf2927973af24974ad39b51e6a9ab9470dca5989b3d792d4ced42d4a21029d840e2d42513d44b2f8ea0549682e50d77fde260c54c9bc9f18fd9524d5303a2fdf8ec37554af570249ec7953a48ad804457ae0f08e53d1ddff6832650cdb04c167e43f2343c46994d96ce79fe354b4f723a363849d29a", 0x7f}], 0x4, &(0x7f00000041c0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1]}}, @rights={{0x2c, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}], 0xc8, 0x40001}}, {{&(0x7f00000042c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000044c0)=[{&(0x7f0000004340)="7fa79f98d723c8d0e807c1655f6504775092368c4fb92f4cc9698290b93546e0c6c594c76d5a55a06f49c6268554fc372803f9aeb74de0316ffbebf7f31eeffed8035e260efc77da0474ad671d7fdb23696623", 0x53}, {&(0x7f00000043c0)="641a7ee81391b5818d8e6b36673e922cf05f2cdec378fcda41e53d5672807f4b389634a7153d6c49cf9238ae76f3358d25a195cc492b6b717937acf985366159c279d4abffbda357d8108b6b10ec0384fcb33fbce090b33befa7e4315f832d5b2a0db016ca0c6e7541e91063b4aabb873e25c50270fcf0211afb027335c7d708fcae783c05589a653781747b779d717be78ff8650e5bda7d15408f1d38b8d7423f604f8c90ec3484a3e1a5f31ea767c86d121b876a62328c88a6530f711a04c32e64b86e", 0xc4}], 0x2, 0x0, 0x0, 0x801}}], 0x6, 0x40080) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x40000000003, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r7, &(0x7f0000000540)={0x4, 0x8, 0xfa00, {r9}}, 0x10) [ 1397.977157] audit: type=1804 audit(1634691984.774:1952): pid=5001 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/485/bus" dev="sda1" ino=14215 res=1 [ 1398.002208] netlink: 'syz-executor.4': attribute type 7 has an invalid length. 01:06:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xad27b6c2}, 0x0) [ 1398.029093] audit: type=1804 audit(1634691984.904:1953): pid=5036 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/486/bus" dev="sda1" ino=14212 res=1 [ 1398.085836] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1398.170104] audit: type=1804 audit(1634691984.904:1954): pid=5036 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/486/bus" dev="sda1" ino=14212 res=1 [ 1398.237542] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1398.388464] audit: type=1804 audit(1634691985.084:1955): pid=5036 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/486/bus" dev="sda1" ino=14212 res=1 01:06:25 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000540)={0x4, 0x8, 0xfa00, {r1}}, 0x10) 01:06:25 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x40) dup(0xffffffffffffffff) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000140)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000780)={{r0}, r1, 0x0, @unused=[0x0, 0xffff, 0x2, 0x7f], @subvolid=0x3}) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004240)={0x2020}, 0x2020) lseek(0xffffffffffffffff, 0x4, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000180)) r2 = getpgid(0x0) r3 = perf_event_open(&(0x7f0000000700)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10088, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r3, r3, &(0x7f0000000000)=0x5, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r5 = open(&(0x7f0000000380)='./bus\x00', 0xac4080, 0x0) fallocate(r5, 0x20, 0x0, 0xfffffeff000) fallocate(r5, 0x0, 0x0, 0x10000101) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000040)) [ 1398.465191] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1398.477359] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1398.534897] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1398.596871] audit: type=1804 audit(1634691985.094:1956): pid=5036 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/486/bus" dev="sda1" ino=14212 res=1 01:06:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x3f0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:06:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xc2b627ad}, 0x0) [ 1398.664477] audit: type=1804 audit(1634691985.504:1957): pid=5069 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/487/bus" dev="sda1" ino=14216 res=1 01:06:25 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000540)={0x4, 0x68, 0xfa00, {0xffffffffffffffff, 0xd7086ab8}}, 0x10) [ 1398.760586] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1398.810799] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:06:25 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x200c02, 0x10b) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x7f, 0xe6, 0x3, 0x50, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x7800, 0x8, 0x1, 0x1}}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0xf0ebba9e592878b8) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000004c0)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000540)={0x4, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r4}}, 0x18) chown(&(0x7f0000000140)='./file0\x00', 0xee01, 0xee00) [ 1398.995254] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1399.086349] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:06:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x3f8, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:06:26 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000540)={0x4, 0x8, 0xfa00, {r1}}, 0x10) 01:06:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xe8030000}, 0x0) [ 1399.391770] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1399.418839] audit: type=1804 audit(1634691986.294:1958): pid=5073 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/487/bus" dev="sda1" ino=14216 res=1 01:06:26 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000540)={0x4, 0x8, 0xfa00, {r1}}, 0x10) [ 1399.603234] audit: type=1804 audit(1634691986.424:1959): pid=5118 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/487/bus" dev="sda1" ino=14216 res=1 01:06:26 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x80000000) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000506, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000, 0x4000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r2, 0x4, 0x1) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) sendfile(r2, r3, &(0x7f0000000000)=0x20000000000005, 0x3ff) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f00000001c0)) fallocate(r5, 0x1c, 0x0, 0xfffffeff000) fallocate(r5, 0x0, 0x0, 0x10000101) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x200080, 0x20) fanotify_mark(r4, 0xc, 0x40000003, r6, &(0x7f0000000140)='./bus\x00') [ 1399.651102] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:06:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x3fa, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:06:26 executing program 2: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2a2040, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) dup3(r1, r0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0), 0x106}}, 0x20) 01:06:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xf0ffffff}, 0x0) 01:06:26 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x5, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) write$UHID_CREATE2(r3, &(0x7f00000004c0)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0xbf, 0x6f0, 0x3, 0xeb62, 0x3ff, 0x8, "0fe631481ba7a764486aefec872ee7b0da74a88895b831ba647f9f50b907d107fec86f6dd77ed92470756f38616cbbdc031bff4845c925bc10c3436909b87d83ec2cdd240ba863f090c418a442b54d9b9c76beb83cff86ddf2d75b638cf7d1e2fa3be6190b2327c5b8f6efd1114bc03e14f21e6428a181edcf8a3bd8df8dc6dcdf6e2730c40f95714b45f5138cb8b5ad7d2ebbdba9070ff62203e58b0d2a6e9095781c17860c8247169608986e3d30cff200aa4a97a21556232b6c7ca7d593"}}, 0x1d7) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r4, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) readv(r4, &(0x7f0000000440)=[{&(0x7f0000000140)=""/213, 0xd5}, {&(0x7f0000000240)=""/111, 0x6f}, {&(0x7f00000002c0)=""/220, 0xdc}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/77, 0x4d}], 0x6) sendfile(r0, r3, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r5, 0x20, 0x0, 0xfffffeff000) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x12, 0xffffffffffffffff, 0x31e36000) fallocate(r5, 0x0, 0x0, 0x10000101) [ 1399.945993] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:06:26 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000540)={0x4, 0x8, 0xfa00, {r1}}, 0x10) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x3, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) 01:06:27 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000540)={0x4, 0x8, 0xfa00, {r1}}, 0x10) [ 1400.346333] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:06:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x3fc, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:06:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xf1ffffff}, 0x0) 01:06:27 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x2e) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0xa00, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x80, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x1, @perf_config_ext={0x0, 0x8001}, 0x0, 0x3, 0x9, 0x4, 0x0, 0x0, 0x400, 0x0, 0x80}, 0x0, 0x10, r2, 0x8) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x7, 0x0, 0x0, 0x8, 0x0, 0x800, 0x200, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xdf, 0x5}, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffff01, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x1, 0x0, 0x1f, 0x0, 0x0, 0x10001, 0x9201, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x1}, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x3f}, 0x0, 0x4, 0xffffffffffffffff, 0x8) sendto$inet(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) socketpair(0x2a, 0x800, 0xffffffff, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000340), 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000540)={0x4, 0x8, 0xfa00, {r4}}, 0x10) 01:06:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x3fe, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:06:27 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x5, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r4 = signalfd4(r2, &(0x7f0000000040)={[0x9]}, 0x8, 0x800) write$ppp(r4, &(0x7f0000000140)="c391e18f5b8bbaa9d102ad2ea80117693dc15b44c676befd1334f7a3ad5987efdc9f9812", 0x24) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r5, 0x20, 0x0, 0xfffffeff000) fallocate(r5, 0x0, 0x0, 0x10000101) 01:06:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xfcffffff}, 0x0) 01:06:29 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x5, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r4, 0x20, 0x0, 0xfffffeff000) fallocate(r4, 0x0, 0x0, 0x10000101) [ 1402.725963] kauditd_printk_skb: 10 callbacks suppressed [ 1402.725978] audit: type=1804 audit(1634691989.605:1970): pid=5222 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/491/bus" dev="sda1" ino=14242 res=1 [ 1402.807009] audit: type=1804 audit(1634691989.665:1971): pid=5223 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/491/bus" dev="sda1" ino=14242 res=1 [ 1402.865777] validate_nla: 6 callbacks suppressed [ 1402.865788] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1402.899936] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1402.975972] nla_parse: 2 callbacks suppressed [ 1402.975981] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1403.096418] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:06:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x503, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:06:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xffff0000}, 0x0) 01:06:30 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r1, 0x4, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000540)={0x4, 0x8, 0xfa00, {r2}}, 0x10) [ 1403.292448] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1403.353200] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1403.486015] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1403.539261] audit: type=1804 audit(1634691990.415:1972): pid=5223 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/491/bus" dev="sda1" ino=14242 res=1 01:06:30 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) setresuid(0xee01, 0xee00, 0xee01) r4 = geteuid() setresuid(0xffffffffffffffff, 0xee01, r4) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r3, 0x401}}, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r5, 0x4, 0x1) r6 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r6, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000100)={0xfffffff9, 0x1, 0x1}) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f0000000540)={0x4, 0x8, 0xfa00, {r1}}, 0x10) [ 1403.660065] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:06:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x600, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) [ 1403.776084] audit: type=1804 audit(1634691990.655:1973): pid=5254 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/491/bus" dev="sda1" ino=14242 res=1 01:06:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xffffa888}, 0x0) [ 1403.802109] audit: type=1804 audit(1634691990.655:1974): pid=5253 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/491/bus" dev="sda1" ino=14242 res=1 [ 1403.850604] netlink: 'syz-executor.4': attribute type 7 has an invalid length. 01:06:30 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x5, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r4, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r5, 0x20, 0x0, 0xfffffeff000) fallocate(r5, 0x0, 0x0, 0x10000101) [ 1403.912283] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1403.974226] audit: type=1804 audit(1634691990.855:1975): pid=5277 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/492/bus" dev="sda1" ino=14184 res=1 [ 1404.049719] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1404.150361] audit: type=1804 audit(1634691990.955:1976): pid=5282 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/492/bus" dev="sda1" ino=14184 res=1 01:06:31 executing program 2: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x103240, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000040)={0x4, @capture={0x0, 0x1, {0x8, 0x235b}, 0x2903d48d}}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r2, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000240)={0x5, @win={{0x1ff, 0x6, 0xff, 0x8000}, 0x0, 0x2fe, &(0x7f00000001c0)={{0x3f, 0x2, 0x9299, 0x1}, &(0x7f0000000180)={{0x14, 0x32, 0x6, 0x84e}, &(0x7f0000000140)={{0x2dc2, 0x2005, 0x80, 0x3}}}}, 0x9, &(0x7f0000000200)="ea4c4fbe7c2955ee66215db7f0cde079f61069c67dd17d0293c8e97a252948cf4a83c2c3af25181bde33ef8487074640936b4e", 0x2}}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000540)={0x4, 0x8, 0xfa00, {r3}}, 0x10) [ 1404.607209] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:06:31 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000004240)={0x2020}, 0x2020) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x7, @mcast2, 0x4}, {0xa, 0x4e23, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, r1, 0x5}}, 0x48) lseek(r2, 0x4, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000540)={0x4, 0x8, 0xfa00, {r1}}, 0x10) 01:06:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xfffff000}, 0x0) 01:06:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xa00, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) [ 1405.062566] audit: type=1804 audit(1634691991.935:1977): pid=5282 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/492/bus" dev="sda1" ino=14184 res=1 [ 1405.175181] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1405.185674] audit: type=1804 audit(1634691992.045:1978): pid=5277 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/492/bus" dev="sda1" ino=14184 res=1 [ 1405.227366] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1405.308158] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1405.328881] audit: type=1804 audit(1634691992.065:1979): pid=5277 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/492/bus" dev="sda1" ino=14184 res=1 01:06:32 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r1, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000000), &(0x7f0000000040)={'L-', 0x81}, 0x16, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000540)={0x4, 0x8, 0xfa00, {r2}}, 0x10) 01:06:32 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x5, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="6800000024008b0d2000"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00000000280008801c000100000000000000000000000000000000000000000001000000060002000000000008000e00ff00000008000d00060000000b000100636c736163740000"], 0x68}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x6b, 0x4, 0x40, @dev={0xfe, 0x80, '\x00', 0x35}, @mcast1, 0x7800, 0x8f7f9862ba3be8d1, 0x3, 0xdd2d}}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="48010000", @ANYRES16, @ANYBLOB="000127bd7000fcdbdf250f00000014000180080003000300000008000100", @ANYRES32, @ANYBLOB="680001e73d1ed5b1054deca58008000100", @ANYRES32, @ANYBLOB="14000200766c616e3100000000000000000000000800030002000000140002006970366772653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="14000200766972745f776966693000000000000008000100", @ANYRES32, @ANYBLOB="300001801400020076657468315f76360265c99cbda68f03b024a003409a536c616e0000", @ANYRES32, @ANYBLOB="08000300020000004c0001801400020076657468315f766c616e00000000000008000100", @ANYRES32, @ANYBLOB="080003008407c53d140002006970766c616e3000000000000000000008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="1cd89d82fb4cbb38", @ANYRES32=r4, @ANYBLOB="0800030003000000080003000300000020000180140002006272696467655f736c6176655f3000000800030002000000"], 0x148}, 0x1, 0x0, 0x0, 0x30000000}, 0x40) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x58}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x4, 0x2, 0x2, 0x2, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x6}, 0x7800, 0x1, 0xffffffff}}) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r7 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r7, 0x20, 0x0, 0xfffffeff000) fallocate(r7, 0x0, 0x0, 0x10000101) [ 1405.458555] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:06:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xc00, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:06:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xffffff7f}, 0x0) [ 1405.636420] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1405.660517] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1405.776468] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1406.177520] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:06:33 executing program 2: getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r4, 0x4, 0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r5, 0x4, 0x1) r6 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@mcast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) r9 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r9, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000080)="a7aae968398e430601c25544dacb7cd8c4b47e2c191f211d5946c8baa2621e76209b5889c7ce4d07b1742de934d2f09955d5ae928c33f56e5f0c0e69b7ca9b70da16ffe28909017d4f01fd40976972341bbaba525a539321415088d0a5c390a7ffadb0cf81711eaf70d4809d49076f57f9ae6abadb2a664c56a59c637890b92c1765f4d081167997d71239cb3ed684b23fa17ed42ec5fa35622a1f9303771ba06e08b9", 0xa3}, {&(0x7f0000000140)}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="1c000201000000000100000001000000a7355bd8e80431a3855a5ad513a4e84b232b0b9a47e09c41935170824268e7350ff2b4b96671dc4d94edfde7f85baf0000003c563c599425499c457ae8013e167c3723964869015d8086d2817102a3e4ba487bd4770af7361b513eda19088c8cd20d93653b921723041573602a447af8a87cd0ff01b484f4d20496440cfb488fe7fb953b9943b21126acb88162b5912440000000", @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r8, @ANYRES32=0xee00, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r9, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xf8}}], 0x1, 0x4008014) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r10, &(0x7f0000000540)={0x4, 0x8, 0xfa00, {r11}}, 0x10) 01:06:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe00, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:06:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xffffff9e}, 0x0) 01:06:33 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000540)={0x4, 0x8, 0xfa00, {r1}}, 0x10) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000040)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @ib={0x1b, 0x6, 0x400, {"38d122e827664c51cf3bc60992df3ebb"}, 0x1800000000000000, 0x3, 0x7fffffff}}}, 0x90) 01:06:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xf00, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:06:33 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000540)={0x4, 0x8, 0xfa00, {r1, 0xfffffffe}}, 0x10) 01:06:33 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x28001, 0xfff}, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x5, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r4, 0x20, 0x0, 0xfffffeff000) fallocate(r4, 0x0, 0x0, 0x10000101) 01:06:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x2000, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:06:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xfffffff0}, 0x0) 01:06:34 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x5, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r4, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r5, 0x20, 0x0, 0xfffffeff000) fallocate(r5, 0x0, 0x0, 0x10000101) [ 1407.780278] kauditd_printk_skb: 7 callbacks suppressed [ 1407.780364] audit: type=1804 audit(1634691994.655:1987): pid=5401 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir545308084/syzkaller.OhfEJJ/662/bus" dev="sda1" ino=14270 res=1 [ 1407.990946] nla_parse: 3 callbacks suppressed [ 1407.990959] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1408.091825] audit: type=1804 audit(1634691994.945:1988): pid=5403 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir545308084/syzkaller.OhfEJJ/662/bus" dev="sda1" ino=14270 res=1 01:06:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xfffffff1}, 0x0) [ 1408.162165] audit: type=1804 audit(1634691995.035:1989): pid=5386 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/494/bus" dev="sda1" ino=14268 res=1 01:06:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x2e02, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) [ 1408.282805] audit: type=1804 audit(1634691995.155:1990): pid=5409 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/494/bus" dev="sda1" ino=14268 res=1 [ 1408.326237] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1408.350535] audit: type=1804 audit(1634691995.195:1991): pid=5408 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/494/bus" dev="sda1" ino=14268 res=1 [ 1408.553410] validate_nla: 8 callbacks suppressed [ 1408.553420] netlink: 'syz-executor.4': attribute type 7 has an invalid length. 01:06:35 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x210004, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x5, 0xffffffff}) sendfile(r2, r2, &(0x7f0000000000)=0x5, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x108) sendfile(r3, r4, 0x0, 0x8400fffffffa) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x7, 0x0, 0x2, 0x0, 0x3, 0x80, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b74, 0x1, @perf_bp={&(0x7f0000000340), 0x5}, 0x8002, 0xfffffffffffffe00, 0x8, 0x7, 0x8, 0x7, 0x5, 0x0, 0xffffffff, 0x0, 0x1}, 0x0, 0xa, r5, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r6, 0x20, 0x0, 0xfffffeff000) fallocate(r6, 0x0, 0x0, 0x10000101) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x22000, 0x0) recvfrom$unix(r7, &(0x7f0000000140)=""/202, 0xca, 0x10000, &(0x7f0000000240)=@file={0x0, './bus\x00'}, 0x6e) [ 1408.595221] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:06:35 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x5, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r4, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r5, 0x20, 0x0, 0xfffffeff000) fallocate(r5, 0x0, 0x0, 0x10000101) [ 1408.883954] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1408.886392] audit: type=1804 audit(1634691995.765:1992): pid=5427 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/495/bus" dev="sda1" ino=14266 res=1 01:06:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x3500, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) [ 1409.111944] audit: type=1804 audit(1634691995.815:1993): pid=5427 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/495/bus" dev="sda1" ino=14266 res=1 01:06:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xfffffffc}, 0x0) 01:06:36 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x5, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000140)) r4 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r4, 0x20, 0x0, 0xfffffeff000) fallocate(r4, 0x0, 0x0, 0x10000101) [ 1409.312050] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1409.328493] audit: type=1804 audit(1634691996.055:1994): pid=5427 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/495/bus" dev="sda1" ino=14266 res=1 [ 1409.420122] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1409.705410] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1409.718943] audit: type=1804 audit(1634691996.165:1995): pid=5427 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/495/bus" dev="sda1" ino=14266 res=1 [ 1410.290661] audit: type=1804 audit(1634691996.245:1996): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir545308084/syzkaller.OhfEJJ/663/bus" dev="sda1" ino=14067 res=1 01:06:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x3602, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:06:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x238000000000}, 0x0) [ 1410.812906] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1410.855088] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:06:37 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x5, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r4, 0x20, 0x0, 0xfffffeff000) fallocate(r4, 0x0, 0x0, 0x100000fd) [ 1411.032846] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:06:37 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x210004, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0x5, 0xffffffff}) sendfile(r2, r2, &(0x7f0000000000)=0x5, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x108) sendfile(r3, r4, 0x0, 0x8400fffffffa) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x7, 0x0, 0x2, 0x0, 0x3, 0x80, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b74, 0x1, @perf_bp={&(0x7f0000000340), 0x5}, 0x8002, 0xfffffffffffffe00, 0x8, 0x7, 0x8, 0x7, 0x5, 0x0, 0xffffffff, 0x0, 0x1}, 0x0, 0xa, r5, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r6, 0x20, 0x0, 0xfffffeff000) fallocate(r6, 0x0, 0x0, 0x10000101) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x22000, 0x0) recvfrom$unix(r7, &(0x7f0000000140)=""/202, 0xca, 0x10000, &(0x7f0000000240)=@file={0x0, './bus\x00'}, 0x6e) 01:06:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x3e03, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) [ 1411.471798] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1411.707167] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1411.729573] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:06:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xffff00000000}, 0x0) [ 1412.240099] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1412.290875] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:06:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x4e00, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) [ 1412.413057] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:06:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x22e, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) [ 1412.650081] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:06:39 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xfff}, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x5, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) sendto$inet6(r3, &(0x7f0000000040), 0x0, 0x80, &(0x7f00000001c0)={0xa, 0x4e23, 0x2, @remote, 0x8001}, 0x1c) fallocate(r4, 0x20, 0x0, 0xfffffeff000) fallocate(r4, 0x0, 0x0, 0x10000101) 01:06:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x40030000000000}, 0x0) 01:06:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x5865, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) [ 1412.917105] kauditd_printk_skb: 13 callbacks suppressed [ 1412.917118] audit: type=1804 audit(1634691999.796:2010): pid=5519 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/498/bus" dev="sda1" ino=14132 res=1 [ 1413.018024] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1413.036456] audit: type=1804 audit(1634691999.906:2011): pid=5523 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/498/bus" dev="sda1" ino=14132 res=1 01:06:39 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x67800}}, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000080004106) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f00000042c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00(`qH\x00', 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents(r4, &(0x7f0000000040)=""/116, 0x74) syz_fuse_handle_req(r2, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x150, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xee01}}, {0x0, 0x0, 0x2, 0x0, 'fd'}}, {{0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6002, 0x0, 0x0, 0xee00}}, {0x0, 0x0, 0x2, 0x0, 'fd'}}]}, 0x0, 0x0}) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000540)={0x4, 0x8, 0xfa00, {r1}}, 0x10) [ 1413.217155] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:06:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x6000, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:06:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xf0ffffffffffff}, 0x0) 01:06:40 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r3, 0x4}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000540)={0x4, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x7}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, r1, 0x2}}, 0x48) [ 1413.555337] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1413.731513] audit: type=1804 audit(1634692000.596:2012): pid=5523 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/498/bus" dev="sda1" ino=14132 res=1 01:06:40 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r3, 0x4}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000540)={0x4, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x7}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, r1, 0x2}}, 0x48) [ 1413.775697] validate_nla: 10 callbacks suppressed [ 1413.775708] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1413.815584] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1413.870738] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:06:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x6558, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) [ 1413.942051] audit: type=1804 audit(1634692000.826:2013): pid=5567 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/498/bus" dev="sda1" ino=14132 res=1 01:06:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x100000000000000}, 0x0) [ 1414.046650] netlink: 'syz-executor.4': attribute type 7 has an invalid length. 01:06:41 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r3, 0x4}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000540)={0x4, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x7}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, r1, 0x2}}, 0x48) [ 1414.126477] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1414.135132] audit: type=1804 audit(1634692000.846:2014): pid=5566 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/498/bus" dev="sda1" ino=14132 res=1 [ 1414.249641] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:06:41 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r3, 0x4}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x7}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, r1, 0x2}}, 0x48) [ 1414.398097] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:06:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x6603, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:06:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x200000000000000}, 0x0) [ 1414.540437] netlink: 'syz-executor.4': attribute type 7 has an invalid length. 01:06:41 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000, 0x0, 0x6}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x5, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = memfd_create(&(0x7f0000000100)='\xb8.\xa5\xd7o\xe02\xe3\aC\xdb\xf6O\x16\xa3\xdd\xb0\x92hia\xf2\xc3\xa3\xd9\xee\xd9s\x92\f]#\x1a:\xdc\xdf\x8c\xdd\xcd\x13\x9d\x98\xf8I\x15\x87\xde\x9c\xa7\xf3\xa4%r\x93\xac\xa9\x03R\x8f9\xa7\xd1\x00bn\x1f\xf5\x00\x84\xd9\x1a\xf0\xc4\x9e\xc1\xbe=\xac\x88\xfb\x92\x10\x85\xe6\xb0\x8d\x997T)X?\x16\xc1\x02\x17A\xa5\xee\xb9\xea\x91\xc9\xff$\x06Yu\xeb\xda\xb5\rrN\x00'/128, 0x0) dup2(0xffffffffffffffff, r4) mmap(&(0x7f0000200000/0x400000)=nil, 0x400002, 0x1, 0x2011, r4, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002180)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000005d00)={r5, 0x7a, 0x1, [0xffffffffffffff81, 0x0, 0x6, 0x2, 0x5], [0xfffffffffffffffd, 0x401, 0x6, 0xffffffffffffffc1, 0xfffffffffffff0c4, 0x5d3, 0x2, 0x7f, 0x6fb, 0x7fffffff, 0x9, 0x3, 0x3ff, 0xffffffffffffffc1, 0x33c, 0x0, 0x40, 0x8, 0x0, 0x5, 0xa0d, 0x80000001, 0x45, 0x2af8, 0x5, 0x9, 0x0, 0x825, 0x99b9, 0x1f, 0x0, 0x800, 0x7, 0x6619, 0xd84, 0x6, 0x0, 0xd950, 0x5, 0x4, 0xfffffffffffffffc, 0xffffffff, 0x40, 0x7b6, 0x7ff, 0x8, 0x8000, 0x8, 0x3f, 0x6, 0x200, 0x2, 0xe5d5, 0x1, 0x415, 0x7, 0x8000, 0x400, 0x6, 0x20, 0x200, 0x96d4, 0x7, 0x1ff, 0x3, 0x6c0, 0x101, 0x65, 0x4, 0x3, 0x9, 0x0, 0xb53d, 0xdf, 0x7, 0x20, 0x8, 0x2, 0xfffffffffffffbff, 0x4b1f, 0xd3c, 0x3, 0x9, 0x2, 0xfffffffffffff9dd, 0x0, 0x0, 0x3, 0x3, 0x5, 0x9, 0x40c79785, 0x0, 0x8e6a, 0x3, 0x7ff, 0x0, 0x9, 0x0, 0x100000001, 0x3, 0x10000, 0x3, 0x1, 0x3, 0xba, 0x4, 0x100000001, 0x1f, 0x0, 0x200000000000000, 0x21, 0x7, 0x0, 0x7, 0x0, 0x0, 0x4, 0x5, 0x4, 0x7]}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000140)={r5, 0x3, 0x5}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r6, 0x20, 0x0, 0xfffffeff000) ioctl$USBDEVFS_RESET(r3, 0x5514) fallocate(r6, 0x0, 0x0, 0x10000101) 01:06:41 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x7}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, r1, 0x2}}, 0x48) [ 1414.602562] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1414.668462] audit: type=1804 audit(1634692001.536:2015): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/499/bus" dev="sda1" ino=13956 res=1 [ 1414.722040] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1414.729342] audit: type=1804 audit(1634692001.606:2016): pid=5615 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/499/bus" dev="sda1" ino=13956 res=1 01:06:41 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x7}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, r1, 0x2}}, 0x48) [ 1414.879069] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:06:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x6e00, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:06:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x300000000000000}, 0x0) [ 1415.075538] netlink: 'syz-executor.4': attribute type 7 has an invalid length. 01:06:42 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x7}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, r1, 0x2}}, 0x48) [ 1415.116924] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:06:42 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x7}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, r1, 0x2}}, 0x48) [ 1415.312094] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:06:42 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x7}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, 0xffffffffffffffff, 0x2}}, 0x48) [ 1415.489346] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1415.489979] audit: type=1804 audit(1634692002.366:2017): pid=5615 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/499/bus" dev="sda1" ino=13956 res=1 01:06:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x6f03, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:06:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x400000000000000}, 0x0) [ 1415.680918] netlink: 'syz-executor.4': attribute type 7 has an invalid length. 01:06:42 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x7}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, 0xffffffffffffffff, 0x2}}, 0x48) [ 1415.732226] audit: type=1804 audit(1634692002.606:2018): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/499/bus" dev="sda1" ino=13956 res=1 [ 1415.768221] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:06:42 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x5, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r4, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=[@flowinfo={{0x14, 0x29, 0xb, 0x101}}], 0x18}}], 0x2, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r5, 0x20, 0x0, 0xfffffeff000) fallocate(r5, 0x0, 0x0, 0x10000101) [ 1415.819137] audit: type=1804 audit(1634692002.606:2019): pid=5651 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/499/bus" dev="sda1" ino=13956 res=1 01:06:42 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x7}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, 0xffffffffffffffff, 0x2}}, 0x48) 01:06:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x7c02, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:06:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x500000000000000}, 0x0) 01:06:43 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x800100000010) r5 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r5, r5, &(0x7f0000000000)=0x5, 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r7 = open(&(0x7f0000000140)='./bus\x00', 0x165042, 0x10) fallocate(r7, 0x20, 0x0, 0xfffffeff000) fallocate(r7, 0x0, 0x0, 0x10000101) 01:06:43 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x7}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, r0, 0x2}}, 0x48) 01:06:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x7e02, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:06:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x600000000000000}, 0x0) 01:06:43 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x7}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, r0, 0x2}}, 0x48) 01:06:43 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x7}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, r0, 0x2}}, 0x48) 01:06:44 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) syz_mount_image$vxfs(&(0x7f0000000040), &(0x7f0000000140)='./bus\x00', 0x3, 0x4, &(0x7f0000000340)=[{&(0x7f0000000180)="eceb0cc385aaa532be8460712331ee615cd8a5f522d8c696b625d16b854849c15c104242f025bd480805ccebb3c3df76607c46111c33711520aecaeb9acb1cf72e5d8ae4e5b4db95506d0951bf1aad70f884fe9832069c2d63f1581ba450ca5cf6fa6a78e783bc1483a16d3d8fb4d9e84e8d6879fc99", 0x76, 0xf8db}, {&(0x7f0000000200)="b82b14956fb923ee8cb080cb0a4cbd02d1b0b2ac029f8f010408cba658bdd906701c311764aa6d4be37a040903d1fd5b5558514098e9d3ea78321c4371bcf5f717ce94f0dfac32175d1290a852a9e65fa452e29457e7917b25bb93acb1a8960563b1bed8a01ffdaa3555ff01142890b87a13434758718cab7807b6ca245a82f07adba21b005150eeae63532dd7b8bf601173443306fb99ecdec0921e250c1015b5356008f7c868d28f6c4989da86d66672f191b060e19c86975ec7be4b87e20be28723ebd4a010edf2deb902e8ada926a94da07b9f15a7643bbff18e3f", 0xdd}, {&(0x7f0000000300)="d4ed2bc1a5a2b5b1cee27f3e", 0xc, 0x7}, {&(0x7f0000000780)="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", 0x1000, 0x7}], 0x1103846, &(0x7f00000003c0)={[{'\xd1'}, {}, {'{++'}, {'/\xd0'}], [{@smackfsfloor={'smackfsfloor', 0x3d, '%'}}, {@smackfsdef}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@smackfsdef}]}) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x5, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r4, 0x20, 0x0, 0xfffffeff000) fallocate(r4, 0x0, 0x0, 0x10000101) 01:06:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x8100, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:06:44 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x7}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, r1, 0x2}}, 0x48) 01:06:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x700000000000000}, 0x0) 01:06:44 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x7}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, r1, 0x2}}, 0x48) 01:06:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x800000000000000}, 0x0) 01:06:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x8600, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:06:44 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f0000000140)) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) getresuid(&(0x7f0000000540)=0x0, &(0x7f0000000580), &(0x7f00000005c0)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0}, &(0x7f0000000640)=0xc) syz_mount_image$affs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x9, 0x3, &(0x7f00000004c0)=[{&(0x7f0000000200)="5708fc12b049deedd7583542cbce6794251d46481842c280542fd76893fb897288f680663acd0388e46f6e96d192abf09ac69c9f7d07200abf6c5eb689f0f307c5f3532f03c12cb74295a54731fe7bd9c1b5c0eb3b83ad3c8970f9f04780227cea0ac6d0e68484758ed179279156c545c78d00ab892bbf27973ec3448a3fb164676428832b5ab7eea07bf3a2ec79bde0a1e640912d39eab888b004a6a28f603702948cf4d12d13a049f94bc1d52cad30695f6bdee52092ea25c81eda3fd11dd01023c217", 0xc4, 0x7fffffff}, {&(0x7f0000000300)="bee7ca29f5c38341b1175eb2d4bbc5574f90c7a8ef152547c540b9900314602d518a8ac52ea76780b5730bb5501bae375751c3960ded6fae5866c058b399c902fc6462256eb3b0dc56dad69875ef912ae16f18a052d3537c4929877ae4983ed61892295e82ba59b1bcd3cc0d9263bda692731d3e703174eb9c8db9ffe7c638d1e3798f34ddaef281364cbceb07f05a9be92309ce4a2d8732dbada4b46252449c099027ab92c00e709a076cb2eec60631c2df1883ace9ae3cfff50c187e603942bc56666f5b73bd16", 0xc8, 0x4}, {&(0x7f0000000400)="81aee13a724d00d2e4a5031c2fe39186d5424668439d5bad857ebb041e93e91a4c1d77b1b3955edcc011994e01c70c1e04d12f5d7a677074a967b4eca0c07f9fc12fa4737bd378902bd336e1ccbae73bfb8f57878822ee37b6ee57f455abee1a3264c8b68b835b792f0880955af9e7f3167b6629b766688928856f1cba690a33aed75b996d2645c090d780a301c6c3e62b98889aaf5d1fcdf5d4fed4", 0x9c, 0xfffffffffffffffb}], 0x2, &(0x7f0000000780)={[{'}%]^%+*+'}, {'-@[\'!\'\'#\'*^#*$%{($]&]Z'}, {')@['}, {'{\'(^'}, {}, {}, {'%('}], [{@pcr={'pcr', 0x3d, 0x7}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@smackfsdef={'smackfsdef', 0x3d, '[:/'}}, {@euid_lt={'euid<', r7}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@euid_gt}]}) sendfile(r0, r5, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r8, 0x20, 0x0, 0xfffffeff000) fallocate(r8, 0x0, 0x0, 0x10000101) 01:06:44 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x7}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, r1, 0x2}}, 0x48) 01:06:44 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x7}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, r1, 0x2}}, 0x48) [ 1417.888693] affs: Unrecognized mount option "}%]^%+*+" or missing value [ 1418.060847] affs: Error parsing options [ 1418.093848] nla_parse: 9 callbacks suppressed [ 1418.093857] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1418.118002] kauditd_printk_skb: 5 callbacks suppressed [ 1418.118017] audit: type=1804 audit(1634692004.996:2025): pid=5788 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/503/bus" dev="sda1" ino=14465 res=1 01:06:45 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x7}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, r1, 0x2}}, 0x48) 01:06:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x900000000000000}, 0x0) 01:06:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x9e02, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) [ 1418.897567] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1419.373438] validate_nla: 14 callbacks suppressed [ 1419.373447] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1419.374669] audit: type=1804 audit(1634692006.246:2026): pid=5773 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/503/bus" dev="sda1" ino=14465 res=1 [ 1419.378319] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1419.455048] affs: Unrecognized mount option "}%]^%+*+" or missing value [ 1419.463044] affs: Error parsing options [ 1419.469375] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:06:46 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x7}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, r1, 0x2}}, 0x48) [ 1419.510318] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1419.527958] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:06:46 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x5, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x5, 0x80, 0x8, 0x7, 0x3, 0x5, 0x0, 0x6, 0x40, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f00000018c0), 0xd}, 0x400, 0x400, 0x3ff, 0x9, 0x7, 0xbf71, 0x3, 0x0, 0x1, 0x0, 0x8}, r1, 0x5, r3, 0x3) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = syz_mount_image$jffs2(&(0x7f0000000040), &(0x7f0000000140)='./bus\x00', 0x7, 0xa, &(0x7f0000001780)=[{&(0x7f0000000180)="4c764c797e029a1d72b51788e0d2f296a2848f30a98772a8353278bc8b1a35bc603189c5826692358d8ed8c24bd08f8f3954e664", 0x34, 0x400}, {&(0x7f0000000780)="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", 0x1000, 0x8}, {&(0x7f00000001c0)="130c066176b2760747c63061ad4cb43c203e209c92e020bf3c4f84dc3245199425", 0x21, 0x27}, {&(0x7f0000000200)="fe0f95783fc3769b1c8764d8924ec8184bb616c8b726e8a51ae44e68c765909c47273eafe2414fd3ed7c05f25e0788ce6597eb4994656263ef748299184ac6b44769d63cf26686dc896a636b2a2cc9c1be3b7c2f27ff0c06984b5e2c97efc0301dc2a3935d7e9271eac2c09c5c4c22ba098bf07d3e3a88ed120f3894d27dc4f5f979e6a9e75bc4455e43496823db60b37454e81ce31b7173038f232633e80110af21f8e03824fefb96e89fcc0ad91a61cc6f906702229aeb5cb4ef496dc596df2f1af57d8e4e7b9815519e67276e30992a", 0xd1, 0x76}, {&(0x7f0000000300)="1a242b57676b909803bc28fe17a0df9510c72d7b6be6571ebce2622010af50b9127bc42269ca814a53f1e97982b9b619bd10cd9ed1f0bbcf4f71db01deaf037abf1e3d736cae8da815fc749e8eb19f11535a77510e7f31f5f3", 0x59, 0x5}, {&(0x7f0000000380)="e8483031da4a6250a1e325303d57d6d86a", 0x11, 0xffffffffffffffff}, {&(0x7f00000003c0)="9af2e7c9a812892eb904d901ad0e998dc5e604af211e413848bb8f3caddc8f0079adc992339c4f837d303f91f3aacd3c76ed8fb3aaead16e544ae621288c3419a7144456d47b30dcfb2e008e9b3edaa5a68762cc5ffc1787197f9e3703133a1192ba5698e1a5412b64c08c858cd7a3718d413cb6fcd60e57f1c2610c43816727e1b855aaf434fe93b6dd746da59996120646f75da849bc4125f2a9fbc8833db75c28a44cd01a64", 0xa7}, {&(0x7f0000000480)="6c090e13b7ea790f06dec0daae346b9b8e9fa5f2ef806a179a29a7dc54832885ced03a20e8c0b2dad4bb19a2dd2d63dacc1e87ab951316c3c961bf183fe1df42a7164f9c36a787f108086d815e279596bb784a3b7c854f7cdaab4595c946b977e75e6882e62f7661c107ccf24d64246245ecceaac9066da900ae4c2c83d51a3fe2bbfd9c7fb0a242e185b90df78a9516", 0x90, 0x7fff}, {&(0x7f0000000540)="9e109a699163710c0d9b21e03fdf9b0727f8c14dd6bb0acca6946864ab5b441e0940cf54c5b7ce6e114dc883a466de87b0e2478f17c821b0c8c92ac90c0fa22a6e875705bc67110e3d7c9a09387e66b7923e27e2f981b3f522b86a61386de3740df3baabe97b1ef08026a0e3b8ba31116864504470b93f928ea3f96f6bd9c27ccc759f0ac829", 0x86, 0x2}, {&(0x7f0000000600)="1ed23f095940072d24c59251c89e6142dbd7062c23853376301f03cb36278a2a24ddf045cda66f5d9dc1a5c826feecefb902b62b723802a87a878035fa03f19642", 0x41, 0x5}], 0x40000, &(0x7f0000000680)={[{}, {}, {@compr_lzo}, {}, {@rp_size={'rp_size', 0x3d, 0x4}}], [{@uid_lt={'uid<', 0xffffffffffffffff}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@subj_role={'subj_role', 0x3d, '+^['}}]}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f0000001880)=0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001980)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000001b80)={{r5, 0x7fff, 0x7f, 0x2, 0x8000, 0x0, 0x7, 0xff, 0x40, 0x3f, 0x4, 0x23, 0x3, 0x5, 0x100000000}}) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r6, 0x20, 0x0, 0xfffffeff000) fallocate(r6, 0x0, 0x0, 0x10000101) setpriority(0x0, r1, 0x2c) 01:06:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xaa03, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:06:46 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x7}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, 0xffffffffffffffff, 0x2}}, 0x48) 01:06:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xa00000000000000}, 0x0) [ 1419.818905] audit: type=1804 audit(1634692006.306:2027): pid=5787 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/503/bus" dev="sda1" ino=14465 res=1 [ 1419.908324] audit: type=1804 audit(1634692006.696:2028): pid=5820 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/504/bus" dev="sda1" ino=14385 res=1 [ 1420.001873] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1420.060345] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1420.077980] audit: type=1804 audit(1634692006.956:2029): pid=5834 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/504/bus" dev="sda1" ino=14385 res=1 [ 1420.115321] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1420.196881] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:06:47 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x7}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, 0xffffffffffffffff, 0x2}}, 0x48) 01:06:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xb000, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:06:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xb00000000000000}, 0x0) 01:06:47 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000140)) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x5, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r4, 0x20, 0x0, 0xfffffeff000) fallocate(r4, 0x0, 0x0, 0x10000101) [ 1420.467763] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1420.474488] audit: type=1804 audit(1634692007.346:2030): pid=5854 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/505/bus" dev="sda1" ino=14449 res=1 [ 1420.541502] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1420.585137] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1420.610207] audit: type=1804 audit(1634692007.486:2031): pid=5864 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/505/bus" dev="sda1" ino=14449 res=1 01:06:47 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x7}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, 0xffffffffffffffff, 0x2}}, 0x48) [ 1420.714304] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1420.723950] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1420.920119] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:06:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xc00000000000000}, 0x0) 01:06:48 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x7}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, r1, 0x2}}, 0x48) [ 1421.310744] audit: type=1804 audit(1634692008.176:2032): pid=5864 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/505/bus" dev="sda1" ino=14449 res=1 01:06:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xb200, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) [ 1421.339619] audit: type=1804 audit(1634692008.206:2033): pid=5864 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/505/bus" dev="sda1" ino=14449 res=1 [ 1421.397093] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1421.401856] audit: type=1804 audit(1634692008.276:2034): pid=5866 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/505/bus" dev="sda1" ino=14449 res=1 01:06:48 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x7}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, 0xffffffffffffffff, 0x2}}, 0x48) 01:06:48 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000140)=0xc) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = dup(r0) sendfile(r3, r2, &(0x7f0000000180)=0x4000002000009, 0xfffffffffffffffd) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r5, 0x20, 0x0, 0xfffffeff000) fallocate(r5, 0x0, 0x0, 0x10000101) [ 1421.604505] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:06:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xe00000000000000}, 0x0) 01:06:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xba00, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:06:48 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x7}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, 0xffffffffffffffff, 0x2}}, 0x48) 01:06:48 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x5, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x7, 0x7, 0xff, 0x4}]}) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r4, 0x4, 0x1) sendfile(r4, r2, &(0x7f0000000040)=0x7fffffff, 0x1ec) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r5, 0x20, 0x0, 0xfffffeff000) fallocate(r5, 0x0, 0x0, 0x10000101) [ 1421.845941] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:06:48 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x7}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, 0xffffffffffffffff, 0x2}}, 0x48) 01:06:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xf00000000000000}, 0x0) 01:06:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xbc03, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:06:49 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x7}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, r1, 0x2}}, 0x48) 01:06:49 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x7}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, r1, 0x2}}, 0x48) [ 1423.249478] nla_parse: 2 callbacks suppressed [ 1423.249488] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:06:50 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x7}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, r1, 0x2}}, 0x48) 01:06:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x1000000000000000}, 0x0) 01:06:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xbe03, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:06:50 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x7}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, r1, 0x2}}, 0x48) [ 1423.781575] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:06:51 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x7}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, r1, 0x2}}, 0x48) [ 1424.312123] ieee802154 phy0 wpan0: encryption failed: -22 [ 1424.317740] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.445725] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1424.497333] validate_nla: 10 callbacks suppressed [ 1424.497344] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1424.569414] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:06:51 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x7}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, r1, 0x2}}, 0x48) 01:06:51 executing program 5: r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r0, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000003840)=[{&(0x7f0000000340)=""/206, 0xce}, {&(0x7f0000000440)=""/186, 0xba}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000500)=""/98, 0x62}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000000580)=""/175, 0xaf}, {&(0x7f0000000640)=""/20, 0x14}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000003780)=""/161, 0xa1}], 0x9, 0x1f, 0x5, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x509, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x3}, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0x5, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r5, 0x20, 0x0, 0xfffffeff000) r6 = dup2(r4, r5) preadv(r6, &(0x7f0000000300)=[{&(0x7f0000000140)=""/17, 0x11}, {&(0x7f0000000180)=""/218, 0xda}, {&(0x7f0000000280)=""/96, 0x60}], 0x3, 0x1, 0x4) fallocate(r5, 0x0, 0x0, 0x10000101) 01:06:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x6000000000000000}, 0x0) 01:06:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xc003, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:06:52 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x7}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, r1, 0x2}}, 0x48) [ 1425.168965] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1425.213945] kauditd_printk_skb: 7 callbacks suppressed [ 1425.213959] audit: type=1804 audit(1634692012.097:2042): pid=5995 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/508/bus" dev="sda1" ino=14243 res=1 [ 1425.230681] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1425.307322] audit: type=1804 audit(1634692012.187:2043): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/508/bus" dev="sda1" ino=14243 res=1 01:06:52 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x7}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, r1, 0x2}}, 0x48) [ 1425.426162] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:06:52 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) [ 1425.583609] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:06:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xc203, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:06:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x6558000000000000}, 0x0) 01:06:52 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) [ 1425.810108] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:06:52 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) [ 1426.029298] audit: type=1804 audit(1634692012.907:2044): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/508/bus" dev="sda1" ino=14243 res=1 [ 1426.042424] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1426.098969] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:06:53 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback, 0x7}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, r1, 0x2}}, 0x48) [ 1426.208988] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1426.299120] audit: type=1804 audit(1634692013.177:2045): pid=5995 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/508/bus" dev="sda1" ino=14243 res=1 01:06:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xc401, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) [ 1426.430887] audit: type=1804 audit(1634692013.207:2046): pid=6035 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/508/bus" dev="sda1" ino=14243 res=1 01:06:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x8100000000000000}, 0x0) [ 1426.474234] netlink: 'syz-executor.4': attribute type 7 has an invalid length. 01:06:53 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback, 0x7}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, r1, 0x2}}, 0x48) [ 1426.522531] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:06:53 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback, 0x7}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, r1, 0x2}}, 0x48) [ 1426.687286] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1426.833495] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:06:53 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, r1, 0x2}}, 0x48) 01:06:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xc800, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:06:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x88a8ffff00000000}, 0x0) [ 1427.013913] netlink: 'syz-executor.4': attribute type 7 has an invalid length. 01:06:53 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback}, {0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, r1, 0x2}}, 0x48) [ 1427.070115] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:06:54 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000280)={0x10, 0x30, 0xfa00, {0x0, 0x2, {0xa, 0x4e20, 0x0, @remote}, r1}}, 0x38) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r2, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000300)=[0x0, 0x6, 0x8, 0x6, 0x401, 0x40, 0x4a], 0x7, 0x800, 0x0, 0xffffffffffffffff}) write$P9_RREADLINK(r3, &(0x7f0000000400)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r5, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r7, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x40, @dev={0xfe, 0x80, '\x00', 0x29}}, {0xa, 0x4e22, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80}, r7, 0x81}}, 0x48) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x400000b5, @dev={0xfe, 0x80, '\x00', 0xc}, 0x4}, r1}}, 0x30) 01:06:54 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, r1, 0x2}}, 0x48) [ 1427.177129] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:06:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x9effffff00000000}, 0x0) 01:06:54 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev, 0x351c}, r1, 0x2}}, 0x48) 01:06:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xca01, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:06:54 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x106, 0xa}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000280)={0x10, 0x30, 0xfa00, {0x0, 0x2, {0xa, 0x4e21, 0x8000, @remote, 0x2}, r2}}, 0x38) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x8, 0x7fff, {"fbf19284865fb164db209d4a600076fa"}, 0x3c92, 0x5, 0x6}}}, 0x90) 01:06:54 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r1, 0x2}}, 0x48) 01:06:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xad27b6c200000000}, 0x0) 01:06:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xce00, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:06:54 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r1, 0x2}}, 0x48) 01:06:54 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x701800, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x120}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x1409, 0x100, 0x70bd27, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x20044805}, 0x4000010) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000004240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) lseek(r2, 0x4, 0x1) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f00000000c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, 0x8}}, 0x18) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000140)) openat$cgroup_ro(r4, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0xd93001476c3625c7}}, 0x5) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480), 0x80, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xf5, 0x0, 0x6, 0x7f, 0x0, 0xfffffffffffff52f, 0x1002, 0xd, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1000, 0x1, @perf_config_ext={0x0, 0x8}, 0x600, 0x100, 0x1f, 0x5, 0x2, 0xd3b5, 0x3, 0x0, 0xfffffffb, 0x0, 0x5}, r3, 0x9, r6, 0xa) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000280)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x4e20, 0x0, @remote}, r5}}, 0x38) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000100)={0x2e, 0x6, 0x0, {0x2, 0x4, 0x5, 0x0, '])%&:'}}, 0x2e) 01:06:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xe803000000000000}, 0x0) 01:06:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xd203, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:06:55 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r1, 0x2}}, 0x48) 01:06:55 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000280)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x4e20, 0x0, @local, 0x6}, r1}}, 0x38) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000540)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x0, @remote, 0xeb9}, r4}}, 0x30) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$FUSE(r5, &(0x7f0000002400)={0x2020}, 0x99f946c7) lseek(r2, 0x4, 0x1) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r7, 0x4, 0x1) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000580), r4, r7}}, 0x18) sendmsg$NFT_BATCH(r7, &(0x7f0000000340)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400000010000117eb000000000000000000000a1400509d5c26da2182f600000000005d0f000a002845f2c2d54f213911a148c6b20f85a33c667077596ed904811d4d650d768086156e7a9b69c06fa97edb85dacc7f18683c48b3cb0c9558c883796877ecb480f1afe6a352070e85b8cde85f642e4b8ae5b643b3ce0c0c4dd44717f7aaf03793686e754ffc3f5c29779ddf7c590cb2d9037896342a72a895370bf9223d55b4f843da554c11fbb44ef3f063b8ad5778334122775231d49dedede8c5925b36bbc4242feb3c"], 0x28}, 0x1, 0x0, 0x0, 0x4002000}, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r8, 0x0, 0x10, 0x10, 0x0, @in6={0xa, 0x4e24, 0x7f, @mcast2, 0xa2}, @in={0x2, 0x4e20, @rand_addr=0x64010101}}}, 0x118) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r8, 0x4}}, 0x10) 01:06:55 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, 0xffffffffffffffff, 0x2}}, 0x48) [ 1428.371857] nla_parse: 6 callbacks suppressed [ 1428.371867] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:06:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xd603, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:06:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xf0ffffff00000000}, 0x0) 01:06:55 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, 0xffffffffffffffff, 0x2}}, 0x48) [ 1428.690740] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:06:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xdc01, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:06:55 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0xb, 0xfa00, {0x2, &(0x7f0000000000), 0x13f}}, 0x20) 01:06:55 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, 0xffffffffffffffff, 0x2}}, 0x48) [ 1428.912081] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:06:55 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000280)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x4e20, 0x0, @remote}, r1}}, 0x38) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x90000, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_merged\x00', 0x0, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r4, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r5, 0x8001}}, 0x10) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r1, r3}}, 0x18) 01:06:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xf1ffffff00000000}, 0x0) 01:06:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xea03, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) [ 1429.207786] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:06:56 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:06:56 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r1, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000280)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x4e20, 0x0, @remote}, r2}}, 0x38) [ 1429.468809] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:06:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xec03, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:06:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xea03, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:06:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xfcffffff00000000}, 0x0) 01:06:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xc203, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) [ 1429.714343] validate_nla: 18 callbacks suppressed [ 1429.714354] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1429.792226] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1429.879830] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 1429.897145] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 1429.979423] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 1430.006193] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 1430.063042] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1430.208043] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:06:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xee00, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:06:57 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f0000000140)) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) getresuid(&(0x7f0000000540)=0x0, &(0x7f0000000580), &(0x7f00000005c0)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0}, &(0x7f0000000640)=0xc) syz_mount_image$affs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x9, 0x3, &(0x7f00000004c0)=[{&(0x7f0000000200)="5708fc12b049deedd7583542cbce6794251d46481842c280542fd76893fb897288f680663acd0388e46f6e96d192abf09ac69c9f7d07200abf6c5eb689f0f307c5f3532f03c12cb74295a54731fe7bd9c1b5c0eb3b83ad3c8970f9f04780227cea0ac6d0e68484758ed179279156c545c78d00ab892bbf27973ec3448a3fb164676428832b5ab7eea07bf3a2ec79bde0a1e640912d39eab888b004a6a28f603702948cf4d12d13a049f94bc1d52cad30695f6bdee52092ea25c81eda3fd11dd01023c217", 0xc4, 0x7fffffff}, {&(0x7f0000000300)="bee7ca29f5c38341b1175eb2d4bbc5574f90c7a8ef152547c540b9900314602d518a8ac52ea76780b5730bb5501bae375751c3960ded6fae5866c058b399c902fc6462256eb3b0dc56dad69875ef912ae16f18a052d3537c4929877ae4983ed61892295e82ba59b1bcd3cc0d9263bda692731d3e703174eb9c8db9ffe7c638d1e3798f34ddaef281364cbceb07f05a9be92309ce4a2d8732dbada4b46252449c099027ab92c00e709a076cb2eec60631c2df1883ace9ae3cfff50c187e603942bc56666f5b73bd16", 0xc8, 0x4}, {&(0x7f0000000400)="81aee13a724d00d2e4a5031c2fe39186d5424668439d5bad857ebb041e93e91a4c1d77b1b3955edcc011994e01c70c1e04d12f5d7a677074a967b4eca0c07f9fc12fa4737bd378902bd336e1ccbae73bfb8f57878822ee37b6ee57f455abee1a3264c8b68b835b792f0880955af9e7f3167b6629b766688928856f1cba690a33aed75b996d2645c090d780a301c6c3e62b98889aaf5d1fcdf5d4fed4", 0x9c, 0xfffffffffffffffb}], 0x2, &(0x7f0000000780)={[{'}%]^%+*+'}, {'-@[\'!\'\'#\'*^#*$%{($]&]Z'}, {')@['}, {'{\'(^'}, {}, {}, {'%('}], [{@pcr={'pcr', 0x3d, 0x7}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@smackfsdef={'smackfsdef', 0x3d, '[:/'}}, {@euid_lt={'euid<', r7}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@euid_gt}]}) sendfile(r0, r5, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r8, 0x20, 0x0, 0xfffffeff000) fallocate(r8, 0x0, 0x0, 0x10000101) 01:06:57 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f0000000140)) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) getresuid(&(0x7f0000000540)=0x0, &(0x7f0000000580), &(0x7f00000005c0)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0}, &(0x7f0000000640)=0xc) syz_mount_image$affs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x9, 0x3, &(0x7f00000004c0)=[{&(0x7f0000000200)="5708fc12b049deedd7583542cbce6794251d46481842c280542fd76893fb897288f680663acd0388e46f6e96d192abf09ac69c9f7d07200abf6c5eb689f0f307c5f3532f03c12cb74295a54731fe7bd9c1b5c0eb3b83ad3c8970f9f04780227cea0ac6d0e68484758ed179279156c545c78d00ab892bbf27973ec3448a3fb164676428832b5ab7eea07bf3a2ec79bde0a1e640912d39eab888b004a6a28f603702948cf4d12d13a049f94bc1d52cad30695f6bdee52092ea25c81eda3fd11dd01023c217", 0xc4, 0x7fffffff}, {&(0x7f0000000300)="bee7ca29f5c38341b1175eb2d4bbc5574f90c7a8ef152547c540b9900314602d518a8ac52ea76780b5730bb5501bae375751c3960ded6fae5866c058b399c902fc6462256eb3b0dc56dad69875ef912ae16f18a052d3537c4929877ae4983ed61892295e82ba59b1bcd3cc0d9263bda692731d3e703174eb9c8db9ffe7c638d1e3798f34ddaef281364cbceb07f05a9be92309ce4a2d8732dbada4b46252449c099027ab92c00e709a076cb2eec60631c2df1883ace9ae3cfff50c187e603942bc56666f5b73bd16", 0xc8, 0x4}, {&(0x7f0000000400)="81aee13a724d00d2e4a5031c2fe39186d5424668439d5bad857ebb041e93e91a4c1d77b1b3955edcc011994e01c70c1e04d12f5d7a677074a967b4eca0c07f9fc12fa4737bd378902bd336e1ccbae73bfb8f57878822ee37b6ee57f455abee1a3264c8b68b835b792f0880955af9e7f3167b6629b766688928856f1cba690a33aed75b996d2645c090d780a301c6c3e62b98889aaf5d1fcdf5d4fed4", 0x9c, 0xfffffffffffffffb}], 0x2, &(0x7f0000000780)={[{'}%]^%+*+'}, {'-@[\'!\'\'#\'*^#*$%{($]&]Z'}, {')@['}, {'{\'(^'}, {}, {}, {'%('}], [{@pcr={'pcr', 0x3d, 0x7}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@smackfsdef={'smackfsdef', 0x3d, '[:/'}}, {@euid_lt={'euid<', r7}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@euid_gt}]}) sendfile(r0, r5, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r8, 0x20, 0x0, 0xfffffeff000) fallocate(r8, 0x0, 0x0, 0x10000101) [ 1430.343438] netlink: 'syz-executor.4': attribute type 7 has an invalid length. 01:06:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xffffff7f00000000}, 0x0) [ 1430.414580] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:06:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xf000, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) [ 1431.295018] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1431.337192] audit: type=1804 audit(1634692018.217:2047): pid=6291 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir631227207/syzkaller.XN3b71/1315/bus" dev="sda1" ino=14866 res=1 01:06:58 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f0000000140)) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) getresuid(&(0x7f0000000540)=0x0, &(0x7f0000000580), &(0x7f00000005c0)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0}, &(0x7f0000000640)=0xc) syz_mount_image$affs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x9, 0x3, &(0x7f00000004c0)=[{&(0x7f0000000200)="5708fc12b049deedd7583542cbce6794251d46481842c280542fd76893fb897288f680663acd0388e46f6e96d192abf09ac69c9f7d07200abf6c5eb689f0f307c5f3532f03c12cb74295a54731fe7bd9c1b5c0eb3b83ad3c8970f9f04780227cea0ac6d0e68484758ed179279156c545c78d00ab892bbf27973ec3448a3fb164676428832b5ab7eea07bf3a2ec79bde0a1e640912d39eab888b004a6a28f603702948cf4d12d13a049f94bc1d52cad30695f6bdee52092ea25c81eda3fd11dd01023c217", 0xc4, 0x7fffffff}, {&(0x7f0000000300)="bee7ca29f5c38341b1175eb2d4bbc5574f90c7a8ef152547c540b9900314602d518a8ac52ea76780b5730bb5501bae375751c3960ded6fae5866c058b399c902fc6462256eb3b0dc56dad69875ef912ae16f18a052d3537c4929877ae4983ed61892295e82ba59b1bcd3cc0d9263bda692731d3e703174eb9c8db9ffe7c638d1e3798f34ddaef281364cbceb07f05a9be92309ce4a2d8732dbada4b46252449c099027ab92c00e709a076cb2eec60631c2df1883ace9ae3cfff50c187e603942bc56666f5b73bd16", 0xc8, 0x4}, {&(0x7f0000000400)="81aee13a724d00d2e4a5031c2fe39186d5424668439d5bad857ebb041e93e91a4c1d77b1b3955edcc011994e01c70c1e04d12f5d7a677074a967b4eca0c07f9fc12fa4737bd378902bd336e1ccbae73bfb8f57878822ee37b6ee57f455abee1a3264c8b68b835b792f0880955af9e7f3167b6629b766688928856f1cba690a33aed75b996d2645c090d780a301c6c3e62b98889aaf5d1fcdf5d4fed4", 0x9c, 0xfffffffffffffffb}], 0x2, &(0x7f0000000780)={[{'}%]^%+*+'}, {'-@[\'!\'\'#\'*^#*$%{($]&]Z'}, {')@['}, {'{\'(^'}, {}, {}, {'%('}], [{@pcr={'pcr', 0x3d, 0x7}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@smackfsdef={'smackfsdef', 0x3d, '[:/'}}, {@euid_lt={'euid<', r7}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@euid_gt}]}) sendfile(r0, r5, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r8, 0x20, 0x0, 0xfffffeff000) fallocate(r8, 0x0, 0x0, 0x10000101) 01:06:58 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f0000000140)) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) getresuid(&(0x7f0000000540)=0x0, &(0x7f0000000580), &(0x7f00000005c0)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0}, &(0x7f0000000640)=0xc) syz_mount_image$affs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x9, 0x3, &(0x7f00000004c0)=[{&(0x7f0000000200)="5708fc12b049deedd7583542cbce6794251d46481842c280542fd76893fb897288f680663acd0388e46f6e96d192abf09ac69c9f7d07200abf6c5eb689f0f307c5f3532f03c12cb74295a54731fe7bd9c1b5c0eb3b83ad3c8970f9f04780227cea0ac6d0e68484758ed179279156c545c78d00ab892bbf27973ec3448a3fb164676428832b5ab7eea07bf3a2ec79bde0a1e640912d39eab888b004a6a28f603702948cf4d12d13a049f94bc1d52cad30695f6bdee52092ea25c81eda3fd11dd01023c217", 0xc4, 0x7fffffff}, {&(0x7f0000000300)="bee7ca29f5c38341b1175eb2d4bbc5574f90c7a8ef152547c540b9900314602d518a8ac52ea76780b5730bb5501bae375751c3960ded6fae5866c058b399c902fc6462256eb3b0dc56dad69875ef912ae16f18a052d3537c4929877ae4983ed61892295e82ba59b1bcd3cc0d9263bda692731d3e703174eb9c8db9ffe7c638d1e3798f34ddaef281364cbceb07f05a9be92309ce4a2d8732dbada4b46252449c099027ab92c00e709a076cb2eec60631c2df1883ace9ae3cfff50c187e603942bc56666f5b73bd16", 0xc8, 0x4}, {&(0x7f0000000400)="81aee13a724d00d2e4a5031c2fe39186d5424668439d5bad857ebb041e93e91a4c1d77b1b3955edcc011994e01c70c1e04d12f5d7a677074a967b4eca0c07f9fc12fa4737bd378902bd336e1ccbae73bfb8f57878822ee37b6ee57f455abee1a3264c8b68b835b792f0880955af9e7f3167b6629b766688928856f1cba690a33aed75b996d2645c090d780a301c6c3e62b98889aaf5d1fcdf5d4fed4", 0x9c, 0xfffffffffffffffb}], 0x2, &(0x7f0000000780)={[{'}%]^%+*+'}, {'-@[\'!\'\'#\'*^#*$%{($]&]Z'}, {')@['}, {'{\'(^'}, {}, {}, {'%('}], [{@pcr={'pcr', 0x3d, 0x7}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@smackfsdef={'smackfsdef', 0x3d, '[:/'}}, {@euid_lt={'euid<', r7}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@euid_gt}]}) sendfile(r0, r5, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r8, 0x20, 0x0, 0xfffffeff000) fallocate(r8, 0x0, 0x0, 0x10000101) [ 1431.430604] audit: type=1804 audit(1634692018.217:2048): pid=6291 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir631227207/syzkaller.XN3b71/1315/bus" dev="sda1" ino=14866 res=1 [ 1431.519872] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1431.527268] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1431.616814] audit: type=1804 audit(1634692018.497:2049): pid=6322 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir631227207/syzkaller.XN3b71/1316/bus" dev="sda1" ino=14866 res=1 [ 1431.694549] audit: type=1804 audit(1634692018.497:2050): pid=6327 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir545308084/syzkaller.OhfEJJ/721/bus" dev="sda1" ino=14899 res=1 [ 1431.726422] affs: Unrecognized mount option "}%]^%+*+" or missing value 01:06:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xffffffff00000000}, 0x0) [ 1431.950482] affs: Error parsing options [ 1432.016694] audit: type=1804 audit(1634692018.897:2051): pid=6332 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir631227207/syzkaller.XN3b71/1316/bus" dev="sda1" ino=14866 res=1 01:06:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xf003, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) [ 1432.065468] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1432.837730] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1432.846969] audit: type=1804 audit(1634692019.727:2052): pid=6327 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir545308084/syzkaller.OhfEJJ/721/bus" dev="sda1" ino=14899 res=1 01:07:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xfffffffffffff000}, 0x0) 01:07:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xf803, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:07:00 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r3, 0x4}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x7}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, r1, 0x2}}, 0x48) [ 1433.755378] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1434.505118] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x2}, 0x0) 01:07:01 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r3, 0x4}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x7}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, r1, 0x2}}, 0x48) 01:07:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xfa03, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) [ 1435.190347] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1435.303629] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1435.338963] validate_nla: 8 callbacks suppressed [ 1435.338972] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1435.407525] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:07:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x3}, 0x0) [ 1435.615666] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:02 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r3, 0x4}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x7}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x351c}, r1, 0x2}}, 0x48) [ 1436.117980] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xfc03, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:07:14 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f0000000140)) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) getresuid(&(0x7f0000000540)=0x0, &(0x7f0000000580), &(0x7f00000005c0)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0}, &(0x7f0000000640)=0xc) syz_mount_image$affs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x9, 0x3, &(0x7f00000004c0)=[{&(0x7f0000000200)="5708fc12b049deedd7583542cbce6794251d46481842c280542fd76893fb897288f680663acd0388e46f6e96d192abf09ac69c9f7d07200abf6c5eb689f0f307c5f3532f03c12cb74295a54731fe7bd9c1b5c0eb3b83ad3c8970f9f04780227cea0ac6d0e68484758ed179279156c545c78d00ab892bbf27973ec3448a3fb164676428832b5ab7eea07bf3a2ec79bde0a1e640912d39eab888b004a6a28f603702948cf4d12d13a049f94bc1d52cad30695f6bdee52092ea25c81eda3fd11dd01023c217", 0xc4, 0x7fffffff}, {&(0x7f0000000300)="bee7ca29f5c38341b1175eb2d4bbc5574f90c7a8ef152547c540b9900314602d518a8ac52ea76780b5730bb5501bae375751c3960ded6fae5866c058b399c902fc6462256eb3b0dc56dad69875ef912ae16f18a052d3537c4929877ae4983ed61892295e82ba59b1bcd3cc0d9263bda692731d3e703174eb9c8db9ffe7c638d1e3798f34ddaef281364cbceb07f05a9be92309ce4a2d8732dbada4b46252449c099027ab92c00e709a076cb2eec60631c2df1883ace9ae3cfff50c187e603942bc56666f5b73bd16", 0xc8, 0x4}, {&(0x7f0000000400)="81aee13a724d00d2e4a5031c2fe39186d5424668439d5bad857ebb041e93e91a4c1d77b1b3955edcc011994e01c70c1e04d12f5d7a677074a967b4eca0c07f9fc12fa4737bd378902bd336e1ccbae73bfb8f57878822ee37b6ee57f455abee1a3264c8b68b835b792f0880955af9e7f3167b6629b766688928856f1cba690a33aed75b996d2645c090d780a301c6c3e62b98889aaf5d1fcdf5d4fed4", 0x9c, 0xfffffffffffffffb}], 0x2, &(0x7f0000000780)={[{'}%]^%+*+'}, {'-@[\'!\'\'#\'*^#*$%{($]&]Z'}, {')@['}, {'{\'(^'}, {}, {}, {'%('}], [{@pcr={'pcr', 0x3d, 0x7}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@smackfsdef={'smackfsdef', 0x3d, '[:/'}}, {@euid_lt={'euid<', r7}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@euid_gt}]}) sendfile(r0, r5, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r8, 0x20, 0x0, 0xfffffeff000) fallocate(r8, 0x0, 0x0, 0x10000101) 01:07:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x4}, 0x0) 01:07:14 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r2, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000003c0)=[{0x11, 0x0, [0x1b0, 0x6, 0xffff1203, 0x7b, 0x5, 0x1000000, 0x400, 0x9, 0x3, 0xa8, 0x80000000, 0xa4a, 0x8, 0x101, 0x6515222, 0x9]}, {0x12, 0x0, [0x10001, 0x5, 0xfffffffb, 0x4, 0x6, 0x6, 0x200, 0xfff, 0xffff, 0x57, 0xffff, 0x9, 0x1000, 0x1, 0x5, 0xdb89]}, {0x5, 0x0, [0x8, 0x0, 0x6, 0x4, 0x400, 0x200, 0x8, 0x12, 0xbdd, 0x80, 0x7, 0x9, 0x9, 0x0, 0xd1, 0xfffffff9]}, {0x2, 0x0, [0x1, 0x83, 0x10, 0x10000, 0x8, 0xffffffff, 0x0, 0x6, 0x7cc6, 0x200, 0x6, 0xfffffff7, 0x1, 0x3d, 0x6]}, {0x4, 0x0, [0x7, 0x5, 0x7f, 0x0, 0x440, 0x270, 0x5, 0x3, 0x9560, 0xffffffa3, 0xffffffff, 0x0, 0x4be, 0x2, 0x5a89, 0x80000000]}, {0x30, 0x0, [0x8, 0x8, 0x8, 0x1, 0x6, 0x4, 0x8001, 0x80000001, 0x0, 0x72f, 0xffffffff, 0x3f, 0x6, 0x7f, 0x3, 0xaa00000]}, {0x2, 0x0, [0x2, 0x8, 0x7f, 0xdd5, 0x8, 0xf95, 0x8, 0x401, 0x376e, 0x7f, 0x80, 0x1, 0xfffff801, 0x9, 0x7fff, 0x4]}, {0x31, 0x0, [0x5, 0x800, 0x3, 0x6, 0x8e20, 0x9, 0x1, 0x3, 0x101, 0x3, 0x5, 0x400, 0x1, 0x0, 0x9f7, 0x7fffffff]}, {0xa, 0x0, [0x1, 0x7, 0x1, 0xfffffffb, 0xffffff16, 0x1, 0x80000001, 0x0, 0x9, 0x7, 0x293, 0x5, 0x3, 0x7e6c, 0xffffffff, 0x2]}, {0x30, 0x0, [0x6, 0x2, 0x3f, 0x7, 0x7ff, 0x0, 0x5b, 0xfe, 0x5, 0x0, 0x9, 0xfffffc01, 0x7, 0x9, 0x3, 0x9]}], r1, 0x1, 0x1, 0x2d0}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r4}}, 0x18) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000004240)={0x2020}, 0x2020) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f00000006c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) lseek(r5, 0x4, 0x1) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r8, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x4, @empty, 0x66}, {0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, r8, 0x2}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000280)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x4e20, 0x0, @remote}, r1}}, 0x38) 01:07:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xfd01, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) [ 1448.021846] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1448.151960] audit: type=1804 audit(1634692035.028:2053): pid=6436 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir545308084/syzkaller.OhfEJJ/722/bus" dev="sda1" ino=14065 res=1 [ 1448.185810] netlink: 'syz-executor.4': attribute type 7 has an invalid length. 01:07:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0xc8, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) [ 1448.207269] affs: Unrecognized mount option "}%]^%+*+" or missing value [ 1448.217345] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1448.237293] affs: Error parsing options [ 1448.424835] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 1448.433347] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 1448.570337] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1448.606730] audit: type=1804 audit(1634692035.478:2054): pid=6449 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir545308084/syzkaller.OhfEJJ/722/bus" dev="sda1" ino=14065 res=1 01:07:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xfe03, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:07:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x5}, 0x0) 01:07:16 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f00000001c0)={0x0, 0x3}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000280)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x4e20, 0x0, @remote, 0x10}, r1}}, 0x38) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000180)={@local}) r3 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r4, 0x4, 0x1) connect$unix(r4, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) openat$cgroup_ro(r3, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000040)={@any, 0x2}) r5 = open(&(0x7f0000000340)='./file0\x00', 0x202000, 0x1b7) openat$cgroup_ro(r5, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) preadv2(r5, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/132, 0x84}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000080)=""/55, 0x37}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x4, 0x1, 0x4, 0xf) [ 1449.410784] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1449.886451] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1449.919016] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:07:17 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) (fail_nth: 1) [ 1450.293252] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1450.345876] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1450.409370] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:07:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x6}, 0x0) [ 1450.605514] FAULT_INJECTION: forcing a failure. [ 1450.605514] name failslab, interval 1, probability 0, space 0, times 0 [ 1450.645819] CPU: 1 PID: 6474 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 1450.653642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1450.663008] Call Trace: [ 1450.665607] dump_stack+0x1fc/0x2ef [ 1450.669249] should_fail.cold+0xa/0xf [ 1450.673065] ? setup_fault_attr+0x200/0x200 [ 1450.677398] ? lock_acquire+0x170/0x3c0 [ 1450.681391] __should_failslab+0x115/0x180 [ 1450.685640] should_failslab+0x5/0x10 [ 1450.689456] kmem_cache_alloc_trace+0x284/0x380 01:07:17 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) dup2(r0, r1) (fail_nth: 1) [ 1450.694140] cma_alloc_port+0x94/0x2b0 [ 1450.698039] rdma_bind_addr+0x2331/0x29f0 [ 1450.702192] ? HARDIRQ_verbose+0x10/0x10 [ 1450.706258] ? perf_trace_lock+0xe2/0x4b0 [ 1450.710427] ? rdma_connect+0x17b0/0x17b0 [ 1450.714583] ? lock_acquire+0x170/0x3c0 [ 1450.718565] ? ucma_resolve_ip+0x117/0x240 [ 1450.722822] rdma_resolve_addr+0x555/0x2230 [ 1450.727153] ? ucma_get_ctx+0x1c/0x160 [ 1450.731046] ? ucma_resolve_ip+0x117/0x240 [ 1450.735287] ? mutex_trylock+0x1a0/0x1a0 [ 1450.739361] ? cma_remove_one+0x880/0x880 01:07:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xffff, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) [ 1450.743517] ? wait_for_completion_io+0x10/0x10 [ 1450.748188] ? __radix_tree_lookup+0x216/0x370 [ 1450.752789] ucma_resolve_ip+0x14b/0x240 [ 1450.756857] ? lock_acquire+0x170/0x3c0 [ 1450.760843] ? ucma_bind+0x230/0x230 [ 1450.764570] ? __might_fault+0x192/0x1d0 [ 1450.768640] ? _copy_from_user+0xd2/0x130 [ 1450.772799] ? ucma_bind+0x230/0x230 [ 1450.776519] ucma_write+0x288/0x350 [ 1450.780153] ? ucma_set_ib_path+0x5a0/0x5a0 [ 1450.784483] ? HARDIRQ_verbose+0x10/0x10 [ 1450.788550] ? perf_trace_lock_acquire+0x530/0x530 [ 1450.793486] ? perf_trace_lock+0xe2/0x4b0 [ 1450.797644] __vfs_write+0xf7/0x770 [ 1450.801285] ? ucma_set_ib_path+0x5a0/0x5a0 [ 1450.805614] ? common_file_perm+0x4e5/0x850 [ 1450.809951] ? kernel_read+0x110/0x110 [ 1450.813849] ? apparmor_getprocattr+0x11e0/0x11e0 [ 1450.818713] ? security_file_permission+0x1c0/0x220 [ 1450.823746] vfs_write+0x1f3/0x540 [ 1450.827305] ksys_write+0x12b/0x2a0 [ 1450.830942] ? __ia32_sys_read+0xb0/0xb0 [ 1450.835011] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1450.840035] ? do_syscall_64+0x21/0x620 [ 1450.844210] do_syscall_64+0xf9/0x620 [ 1450.848025] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1450.853220] RIP: 0033:0x7f916221da39 [ 1450.856936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1450.875842] RSP: 002b:00007f915f793188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1450.883561] RAX: ffffffffffffffda RBX: 00007f9162320f60 RCX: 00007f916221da39 [ 1450.890842] RDX: 0000000000000048 RSI: 0000000020000240 RDI: 0000000000000003 [ 1450.898119] RBP: 00007f915f7931d0 R08: 0000000000000000 R09: 0000000000000000 [ 1450.905395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1450.912675] R13: 00007ffcc1e4ebef R14: 00007f915f793300 R15: 0000000000022000 [ 1450.945144] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:17 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) dup2(r0, r1) [ 1451.171014] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1451.222476] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:07:18 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) (fail_nth: 2) 01:07:18 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r2 = dup2(r0, r1) sendmsg$nl_route(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getroute={0x14, 0x1a, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4890}, 0x10) [ 1451.412659] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:07:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x7}, 0x0) 01:07:18 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:18 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) dup2(r0, r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000004240)={0x2020}, 0x2020) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r3, r4) lseek(r2, 0x4, 0x1) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x9, 0x1, {"625358cdbb8b76f766eb8b08f3b69d15"}, 0x3, 0x0, 0x800}}}, 0x90) [ 1451.756208] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:18 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x4, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1451.931832] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:07:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x8}, 0x0) 01:07:18 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x9, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:19 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r1, 0x4, 0x1) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) dup2(r0, r2) 01:07:19 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x16, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1452.272094] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:19 executing program 2: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r0, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x48) setsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f0000000080)=0x80000000, 0x4) dup2(r0, r0) [ 1452.481554] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:19 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x8, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:07:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x9}, 0x0) [ 1452.647455] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de [ 1452.766333] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de 01:07:19 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa02, {{0xa, 0x4e22, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:19 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup2(r0, r1) 01:07:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:07:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xa}, 0x0) 01:07:20 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa04, {{0xa, 0x4e22, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1453.211957] nla_parse: 2 callbacks suppressed [ 1453.211969] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:20 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x44001, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000140)=@netrom={'nr', 0x0}, 0x10) dup2(r0, r1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r3, 0xc0109414, &(0x7f00000003c0)={0xae9, 0x49, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x106, 0x35b902a7c3f20002}}, 0x20) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x80802, 0x0) ioctl$SIOCAX25GETUID(r4, 0x89e0, &(0x7f00000000c0)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0xee01}) [ 1453.365190] validate_nla: 12 callbacks suppressed [ 1453.365200] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1453.422450] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:07:20 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa07, {{0xa, 0x4e22, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1453.517926] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xb}, 0x0) 01:07:20 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) dup2(r0, r1) 01:07:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:07:20 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa08, {{0xa, 0x4e22, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1453.724627] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:20 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) dup2(r0, r1) [ 1453.906232] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1453.943498] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:07:20 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa09, {{0xa, 0x4e22, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:21 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) dup2(r0, 0xffffffffffffffff) [ 1454.154070] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:21 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa0e, {{0xa, 0x4e22, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xc}, 0x0) [ 1454.382025] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) [ 1454.496376] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1454.585165] netlink: 'syz-executor.4': attribute type 7 has an invalid length. 01:07:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xe}, 0x0) 01:07:21 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa48, {{0xa, 0x4e22, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:21 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r2, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) connect$ax25(r2, &(0x7f0000000000)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) dup2(r0, r1) [ 1454.630766] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1454.850615] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:21 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa60, {{0xa, 0x4e22, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:21 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2, 0x4}}, 0x20) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r3 = syz_mount_image$ufs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3f, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000080)="68ebce9263531663a50356480f0559350ac38d8b4fa0e64116245c76f347075ce2e3db9b162af2c72adca15fea", 0x2d, 0x6}, {&(0x7f00000003c0)="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", 0x1000, 0x8000}], 0x80800e, &(0x7f0000000100)={[{'@,'}, {}, {'/dev\f]\xf0|\xd6\xa0c/infiniband/x'}, {'/dev/infiniband/rdma_cm\x00'}], [{@pcr={'pcr', 0x3d, 0x8}}, {@obj_type={'obj_type', 0x3d, '\''}}, {@dont_measure}, {@smackfshat={'smackfshat', 0x3d, '/dev/infiniband/rdma_cm\x00'}}, {@subj_user={'subj_user', 0x3d, ','}}]}) fcntl$dupfd(r3, 0x406, r2) dup2(r0, r2) [ 1455.107718] ufs: ufs was compiled with read-only support, can't be mounted as read-write [ 1455.166747] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:22 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfafc, {{0xa, 0x4e22, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xa}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:07:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xf}, 0x0) [ 1455.321239] ufs: ufs was compiled with read-only support, can't be mounted as read-write [ 1455.376892] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1455.444421] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:07:22 executing program 2: sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x884) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) getsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) dup2(r0, r1) 01:07:22 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0x2, 0x4e22, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1455.627386] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:22 executing program 2: r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x800) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0), 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) dup2(r1, r1) 01:07:22 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xc, 0x4e22, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1455.862515] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1455.879328] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1455.964701] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:22 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) r3 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r3, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) ioctl$SIOCAX25DELUID(r3, 0x89e2, &(0x7f0000000140)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) read$FUSE(r2, &(0x7f0000004240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) lseek(r2, 0x4, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x106, 0xa}}, 0x20) socketpair(0x23, 0x2, 0x7, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f00000000c0)={0xfffffffc, 0x2, {r5}, {r4}, 0x500, 0x273bea8a}) ioctl$SIOCAX25DELUID(r6, 0x89e2, &(0x7f0000000100)={0x3, @default, r7}) dup2(r0, r1) 01:07:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x10}, 0x0) 01:07:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xc}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:07:23 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0x1b, 0x4e22, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:23 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x5, 0x7f, 0x2, 0xf0, 0x0, 0x5, 0x1800, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3ff, 0x0, @perf_bp={&(0x7f0000000380), 0xc}, 0x4000, 0x0, 0x7, 0x1, 0xfffffffffffffffb, 0x7fffffff, 0x3b, 0x0, 0x7, 0x0, 0xffffffffffffe359}, r1, 0xc, r0, 0x3) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x5, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) timer_create(0x6, &(0x7f0000000040)={0x0, 0x2c, 0x2, @thr={&(0x7f0000000140)="daf8240e9afc0906d8465786045ca75ad5158f4c7af0fd5d028b79e9763c8467c9add8dd4361a773263224840812aa8ebd45a3ba6aeb7e45ae093b7d86d47b34ec197b41225b64378d58cf88d6605046f48e6cefb0624ec2d4feb65dad0a7d3d6a1307a4117354d8d661d7521d3ae3093502d75bafbaa4eee68a43ddf17ca630e54c773a31ed94062d9e27d4ca65e0d13f624f5963880313701c8998c0459705465b1bf3fbdcb6be6618eceb5e96ee8ebd0acef489b06276949a52eacd38b5251079cc7e6d35fe8365dba0b49513b6a9efe19fb89c", &(0x7f0000000240)="692e17be49395758a0bafeae7ece9d6be7b1218f508fe0568d4e078d60adcb38fa6aafdc06a07f740a9b5505e701a45524ac7c054843afaad44414b18366959cbbd3ca8ddaecee5c671e8b5a2ab02f075a354bd9ff3c6a6965c5ad1fdd4b8c797e9a0212d11bc4255b7c91ad5674ca0ceb0a5d10b4a1abce0c348af8926f80d1a1b3e64342dc7ad7c944d5fddbad8dec5e4dac23af27181a5d03e9060534024e9c1f9fdf6e503df699066efae2ba599b013de24852d4ff3863a96e2a444784066f715854f697ab4890762943d60ffed7ab33e3499fff4a5b902153fcea9a9a07d8ea15efa500f218033f777f323015fdb1ec636d8837"}}, &(0x7f0000000340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004db80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000780)={r5, 0x0, "345de8373d48e3d5ab4f726fd257f0e9dd30089a184ce20cf33ec1d052b0cf411679b3bebd52208131956b01282db82cd4e06509012b93ea7e54974f074da06424755f24993a1091459c2b439281ebe8d1ba2f27f1c3db282661d76bbf0b1e63975afcf6f564a9f0e55b0ac0599690c6895ffd3849da3ccce19e67d7a9c03091b2ad6687faae8ef19bf80d936bab0ac03bc260e109852a063fcf6751db22d0eda404bd1ba1e244f138d338838f0d26be1718003003ed4dbcc19baaa17c03f4eadfd916505519eb37c4c5b88e79b4beb3f9b65e7b7ee54264aa1dbb38c47fa25744984a43e2412fc28ea35e7ae482c966e30bb50e540190a807d9bcc68cc999cb", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000063e00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x0, "0ea9cdda233ee3"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004cf00)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x0, "23a7418e673bcd"}) r7 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r7, 0x20, 0x0, 0xfffffeff000) fallocate(r7, 0x0, 0x0, 0x10000101) 01:07:23 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0xffffffff, 0x10, 0x10, 0x0, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000000c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000000), r2, 0x800}}, 0x18) r3 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) dup2(r3, r1) 01:07:23 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1456.550403] audit: type=1804 audit(1634692043.429:2055): pid=6851 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/509/bus" dev="sda1" ino=14290 res=1 01:07:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xe}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:07:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x60}, 0x0) 01:07:23 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x2, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1456.957306] audit: type=1804 audit(1634692043.669:2056): pid=6856 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/509/bus" dev="sda1" ino=14290 res=1 01:07:23 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r2 = dup2(r0, r1) r3 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r3, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000280)={0x5, 0x10, 0xfa00, {&(0x7f0000000000), r4, 0x2}}, 0x18) 01:07:24 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x4, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xf0}, 0x0) 01:07:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:07:25 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_netfilter(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x82000002}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="74010000090a010425bd7000fedbdf250a00000663532b35460e562af37169b8f47ad4fbf7dc2605c70ad60b6ceb509f0208968159df9bb1d3cd4fa42a6de8adda359ae6f8662b64b24a69fc6e12f71a9af4b640e398adb0b72762adfa1c3b68ce38b3441def86c28dbf0801138008008500", @ANYRES32=0x0, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x408c1}, 0x884) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r5, 0x4, 0x1) fcntl$getown(r5, 0x9) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r4, 0x800, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r7 = dup3(r1, r3, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r7, 0x114, 0x7, &(0x7f0000000480)={@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, {&(0x7f00000003c0)=""/158, 0x9e}, &(0x7f0000000340), 0x42}, 0xa0) r8 = dup2(r0, r0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r9, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00'}, 0x30) 01:07:25 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x7, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1458.521963] nla_parse: 5 callbacks suppressed [ 1458.522027] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1458.558232] audit: type=1804 audit(1634692045.429:2057): pid=6856 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/509/bus" dev="sda1" ino=14290 res=1 [ 1458.649244] validate_nla: 10 callbacks suppressed [ 1458.649257] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1458.749901] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1459.012309] audit: type=1804 audit(1634692045.889:2058): pid=6918 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/509/bus" dev="sda1" ino=14290 res=1 01:07:25 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x5, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/clear_refs\x00', 0x1, 0x0) fcntl$setsig(r4, 0xa, 0x39) sendfile(r0, r3, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r5, 0x20, 0x0, 0xfffffeff000) fallocate(r5, 0x0, 0x0, 0x10000101) 01:07:25 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) dup2(r0, r1) 01:07:25 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x8, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x300}, 0x0) 01:07:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) [ 1459.099854] audit: type=1804 audit(1634692045.919:2059): pid=6917 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/509/bus" dev="sda1" ino=14290 res=1 [ 1459.162306] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1459.206952] audit: type=1804 audit(1634692046.079:2060): pid=6942 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/510/bus" dev="sda1" ino=14739 res=1 01:07:26 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x9, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1459.310472] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1459.331152] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:07:26 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = dup2(r0, r1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 1459.356928] audit: type=1804 audit(1634692046.169:2061): pid=6956 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/510/bus" dev="sda1" ino=14739 res=1 [ 1459.488648] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:26 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xe, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x35}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:07:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x3e8}, 0x0) 01:07:26 executing program 2: prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) dup2(r0, r1) [ 1459.757346] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1459.838412] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:07:26 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x48, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1459.994104] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1460.014139] audit: type=1804 audit(1634692046.889:2062): pid=6956 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/510/bus" dev="sda1" ino=14739 res=1 [ 1460.072717] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1460.265937] audit: type=1804 audit(1634692047.139:2063): pid=7003 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/510/bus" dev="sda1" ino=14739 res=1 01:07:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x4e}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:07:27 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x2, 0x1}}, 0x20) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) dup2(r0, r1) 01:07:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x500}, 0x0) 01:07:27 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x60, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:27 executing program 3: ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000240)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000400)={&(0x7f0000000340)=[0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x2, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000680)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000700)={&(0x7f00000006c0)=[r5], 0x0, 0x1, 0x4}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000480)=0x5d5) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f00000001c0)={0x8}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000580)={&(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0], 0x1, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={r1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000600)={&(0x7f0000000300)=[r0, 0x0, r7, r1, r2, 0x0, r3], &(0x7f00000005c0)=[0x0, r4, 0x0, r6, 0x0], 0x7}) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r9, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 1460.342729] audit: type=1804 audit(1634692047.139:2064): pid=7004 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/510/bus" dev="sda1" ino=14739 res=1 01:07:27 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x160}}, 0x40000010) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001780)="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", 0x2000, &(0x7f0000003e00)={&(0x7f00000005c0)={0x50, 0x0, 0x10000, {0x7, 0x22, 0x70, 0x30c00, 0x5, 0x400, 0x9, 0x1}}, &(0x7f00000003c0)={0x18, 0x0, 0x10001}, &(0x7f0000000640)={0x18, 0x0, 0xffff, {0x80}}, &(0x7f0000000680)={0x18, 0xfffffffffffffffe, 0xfffffffffffffffc}, &(0x7f00000006c0)={0x18, 0xffffffffffffffda, 0x7f, {0xa9}}, &(0x7f0000003780)={0x28, 0x0, 0xd5f, {{0x0, 0x8}}}, &(0x7f00000037c0)={0x60, 0xffffffffffffffda, 0x8001, {{0x100000001, 0x49, 0x0, 0x1, 0x9, 0x753b, 0x9, 0x6}}}, &(0x7f0000003840)={0x18, 0x0, 0x100000001, {0x2}}, &(0x7f0000000380)=ANY=[@ANYBLOB="1300004568e3577e751e542fd0a9f9833768de48ec95a1e3b475c5cbd015679e00"], &(0x7f00000038c0)={0x20, 0xfffffffffffffffe, 0x1f, {0x0, 0x12}}, &(0x7f0000003900)={0x78, 0x0, 0x7fffffff, {0x0, 0x10000, 0x0, {0x5, 0x4, 0x3, 0x4, 0x0, 0x6f123f7, 0x3, 0x800, 0x30000000, 0x6000, 0x8, 0xee01, 0x0, 0x1, 0xea92}}}, &(0x7f0000003980)={0x90, 0x0, 0xfda, {0x1, 0x2, 0x2, 0x3, 0x8, 0x43d, {0x5, 0x9, 0x7, 0x3f, 0x4, 0x4, 0xfffffffb, 0xc899, 0x9, 0x4000, 0x7, 0x0, 0xee01, 0xfffffeff, 0x40}}}, &(0x7f0000003a40)={0xf0, 0x0, 0xffffffffffffffe0, [{0x1, 0x7ff, 0x1, 0x7, '\x00'}, {0x100000000, 0x248, 0x0, 0x7}, {0x0, 0x5, 0x2, 0x3, '+^'}, {0x3, 0x0, 0x7, 0xe22, '*)\xb4..$['}, {0x1, 0xffffffffffff0001, 0xe, 0x10001, '/proc/cpuinfo\x00'}, {0x5, 0x8, 0x1, 0x5, '\x00'}, {0x3, 0x9, 0x6, 0x81, '%+!:(-'}]}, &(0x7f0000003e80)=ANY=[@ANYBLOB="50010000000000000180000000000000010000000000000003000000000000002000000000000000030000000000000000000000000400000500000000000000cc0000000000000002000000000000000200000000000000060000000000000006000000000000004800000006000000080000000080000000080000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0500000004000000000000000200000000000000060000000000000001000000010001002900000000000000020000000000000000000000000000000300000000000000ff0f00000000000003000000fbffffff000000000000000003000000000000000000000100000000070000000000000009000000000000007f000000000000000300000009000000030000000040000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0400000004000000000000000200000000000000ff01000000000000010000000400000000000000000000006f050b35e0fa90a47268fe7d4ec6543099ccac2118f37222c1742a488999222f6f6c126b16d684b92870b892578ab5d136076839fe27f480a81deeaf6a1c3183bf87cc84a2d93701045464e01e700ffb1539164b2c0ed18eeac12cbb8614246cc4bbcd229498e1c8f35ad66f8c7d2ca276a9b28bb74e8bc3b9"], &(0x7f0000003d00)={0xa0, 0x0, 0x5, {{0x2, 0x1, 0x40, 0x4, 0x4fdd944b, 0xffffffff, {0x5, 0x8, 0xb830, 0x0, 0x10001, 0x200, 0x7fffffff, 0x4, 0x8, 0x2000, 0x1}}, {0x0, 0x9}}}, &(0x7f0000003dc0)={0x20, 0x0, 0x2, {0x57, 0x0, 0x3, 0x6}}}) getpgid(0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x88, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x4}, 0x0, 0x1000, 0x0, 0x2e4d0b44db9fc433, 0x7, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x3, r0, 0x2) sendfile(r1, r1, &(0x7f0000000000)=0x5, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x20, 0x0, 0xfffffeff000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000780)={{0x0, 0x1, 0x6, 0x4, 0x9, 0x6, 0x4, 0x7fff, 0x1f, 0x2, 0x6f59, 0x9, 0xffffffffffffff0c, 0xb1, 0x1}}) read$FUSE(r4, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r4, 0x4, 0x1) sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c000000150a010200000000000000000100000608000340000000010900020073797a30000000000c0006400000000c000640000000000000000308000340000000070c0006400000000000000002080003400000000900000000001849851041a7f9475afa3315739b7d9330da96347e28ee347d67e32ec7ce5377128073899f34d61458cae60fe184fa1e7ad7e73a6b997b4a69f8fa89af02688a67ae771cc800e743246da522a450253256cced2e8e873f0422474b64215534bc97541cd03d3652c9dec8c62c2180b0ed2490741d59f20da9962df8a7424f5e535067d5bdaba6df8c827b6277ebcab9dc36fad5"], 0x5c}, 0x1, 0x0, 0x0, 0x240480c0}, 0x40000000) fallocate(r3, 0x0, 0x0, 0x10000101) [ 1460.450759] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1460.487841] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:07:27 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) dup2(r0, r1) close(r0) 01:07:27 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xfc, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1460.602556] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:27 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in6={0xa, 0x4e22, 0x5f, @remote, 0xde}, @in={0x2, 0x0, @multicast1}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2}}, 0x20) [ 1460.861858] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1460.898391] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:07:27 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) dup2(r0, r1) ioctl$FIOCLEX(r0, 0x5451) 01:07:27 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x700, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1461.069762] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x60}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:07:28 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000140)={0x20000000}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r4, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x10d, 0x6}}, 0x2c) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) 01:07:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x600}, 0x0) 01:07:28 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, {0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x3}, r2, 0x1f}}, 0x48) dup2(r0, r1) r3 = open(&(0x7f0000000100)='./file0\x00', 0xec83, 0x34) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140), 0x111, 0xa}}, 0x20) 01:07:28 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x900, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1461.504451] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:28 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000340)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300), r2, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280), 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x0, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r5, 0x100}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) [ 1461.580324] kauditd_printk_skb: 3 callbacks suppressed [ 1461.580384] audit: type=1804 audit(1634692048.459:2068): pid=7109 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/511/bus" dev="sda1" ino=14835 res=1 [ 1461.655505] audit: type=1804 audit(1634692048.459:2069): pid=7118 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/511/bus" dev="sda1" ino=14835 res=1 01:07:28 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xe00, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:28 executing program 2: io_setup(0x7, &(0x7f00000011c0)=0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) io_pgetevents(r0, 0x4, 0x0, &(0x7f0000000240), 0x0, 0x0) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_cancel(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5, r2, &(0x7f0000000080)="1193e7a283791ff0942169e4196ec9e1f4d80cefe31f8224458dfd386322382829c256d7052935a10e5fc0279e02622b0e4835ecd7e371b1d23b6d8208718478c0d5cc124425b24b4734ffe56b73e6d3f322f47eeba7dce8d54892edc48f61959aba8142b8dbeeb6f789415f1be114e2c5d7240294369579401ffbab900474a880f672248647c789441ded3d97d9a72fb147d754480f3a0efc1a2bd2d0511cc524545956a21c0ccb2f4cd8d658a72125adbba40431c27361482d1102c0757492fe5ab1176723d227", 0xc8, 0xfff, 0x0, 0x1}, &(0x7f00000001c0)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) dup2(r3, r4) [ 1461.744133] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:28 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x5, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r4, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0xfffffffffffffffc) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r5, 0x20, 0x0, 0xfffffeff000) fallocate(r5, 0x0, 0x0, 0x10000101) 01:07:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x700}, 0x0) 01:07:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x6e}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) [ 1461.924328] audit: type=1804 audit(1634692048.800:2070): pid=7143 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/512/bus" dev="sda1" ino=14758 res=1 [ 1461.938163] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:28 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x224e, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:29 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @rand_addr=0x64010100}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x2}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f00000003c0)={0x9, 0x108, 0xfa00, {r4, 0x9, "f399db", "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"}}, 0x110) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) [ 1462.068124] audit: type=1804 audit(1634692048.870:2071): pid=7155 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/512/bus" dev="sda1" ino=14758 res=1 01:07:29 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) dup2(r0, r1) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r2, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x2f, 0x0, &(0x7f0000000040)="c25a7ab2bf13285489a2d791ba86d3df08559feb1319903e312ccd7386b63cd9e8560eb607b7d58d6ec2af91626d74"}) 01:07:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x900}, 0x0) 01:07:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x86}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:07:29 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) 01:07:29 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x3f00, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:29 executing program 2: ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) dup2(r0, r1) 01:07:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xa00}, 0x0) [ 1462.744489] audit: type=1804 audit(1634692049.620:2072): pid=7155 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/512/bus" dev="sda1" ino=14758 res=1 [ 1462.903641] audit: type=1804 audit(1634692049.770:2073): pid=7236 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/512/bus" dev="sda1" ino=14758 res=1 01:07:29 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1203, 0x2) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x5, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r4, 0x20, 0x0, 0xfffffeff000) fallocate(r4, 0x72, 0xffffffffffffffff, 0x10000101) 01:07:29 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x4800, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xb0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:07:29 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x29b, @private2, 0x2}, {0xa, 0x4e24, 0x800, @mcast1, 0x4}, r6, 0x40}}, 0x48) r7 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r6, 0x7}}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000440)=[0x8, 0x0, 0xffffffff, 0xfffffff7, 0x80, 0x3, 0xffffffff, 0x7f, 0x200], 0x9, 0x80800, 0x0, 0xffffffffffffffff}) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000680)={0x1, 0x10, 0xfa00, {&(0x7f00000005c0)}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r9, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r10, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000004c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x1, @mcast2, 0xb98}, {0xa, 0x4e21, 0x7, @loopback}, r10, 0x400}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000240)={0x15, 0x110, 0xfa08, {r3, 0x3ff, 0x10, 0x10, 0x0, @in={0x2, 0x7, @rand_addr=0x64010100}, @in={0x2, 0x0, @remote}}}, 0x118) 01:07:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xb00}, 0x0) 01:07:29 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r4, 0x4189}}, 0x10) setsockopt$ax25_int(r2, 0x101, 0x6, &(0x7f0000000000)=0x1f, 0x4) r5 = dup2(r0, r1) io_pgetevents(0x0, 0x3, 0x3, &(0x7f0000000240)=[{}, {}, {}], 0x0, 0x0) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x18100, 0x0) r7 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r7, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000001540)='./file0\x00', 0x100, 0x4) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r9) r10 = syz_mount_image$bfs(&(0x7f00000016c0), &(0x7f0000001700)='./file0\x00', 0xf57, 0x3, &(0x7f0000001a00)=[{&(0x7f0000001740)="640ce276d1c3a203f5cc8e6015156f0e298e77ab68fcc9fd022180063ac449814c6fd680ff7d9f1596f14deacc2f4b7d21bde0523885e0011c6891ca6ee3a6d8ddb81a5c0699b478f11a643d1471846a259d1d46c31d84ac8ecd66d864444232682582f4bd3f8fa1627e86035c552ae951e696ca1c51f4a42b1bce8ff63a58d909f3e2a2f11f0ef0454619bb8c4629af86396b3ea4e1d9d0e625c33a96d0ab4a03b5a8bab4c3ccf5947c7db0d2e4b6baa4bbd39bf5e4fc8a15e1f8", 0xbb, 0x3f}, {&(0x7f0000001800)="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", 0xfd, 0x100000000}, {&(0x7f0000001900)="0c3a29a44993f0ff6d20c173e62b775afa002fb3c56223e107e8750248c2ee41ef41fdb7793c2f816df6749a6c372d3e953a385e6f918f4d4c14a97432d0eb5133a2b9b07a508251e566e3b38efbd1b2e3a685f76369bf8b6fac2e5edf9dfda5990093542aac49f3c3f0ab5529642ace94e071fa41a9a915dbc3fb773874c7e94efda667efde44b113a47d8ab7424f3998b750c459e00df01046a7ea7c942fe5d9019cf6c5b3a8b8a9221b29eef7ae0531b47f4c299d76541cb612d5b663aa7a9076cb6a9001c813354e401581298c5eb3a76f4a4c67b9667e2641a8da9f6e4130d92c2573ca", 0xe6, 0x9}], 0x4000, &(0x7f0000001a80)={[{'@'}, {'\x00'}, {'devices.list\x00'}], [{@subj_user}, {@audit}, {@subj_type={'subj_type', 0x3d, '/dev/infiniband/rdma_cm\x00'}}, {@fowner_lt={'fowner<', 0xee01}}, {@subj_user={'subj_user', 0x3d, '@'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r11, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r11, 0x4, 0x1) io_submit(0x0, 0x9, &(0x7f0000001e80)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x0, r6, &(0x7f0000000180)="d9fb0bdeeaadd2cfba486470c53222e5318a09165865d027b734e182651e44fe16f1d9571fcd024460d967d2af818699cf066eec0d733ab40988ba25e1987b5d79a7e3a68ac1ce804be57cef722b9242f56e5b0cce74dd1a89d95f356419fbb2d6908023e2f21c0f53fcd4ede53ed5b6003ac48677e3200a48c6a94b942ea6744d0c57662259acecee25254c77eed4bf54902b80e1802fd0e19aecd7ec979ba5e937644b", 0xa4, 0x1f, 0x0, 0x1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xa, 0x7, r7, &(0x7f00000003c0)="630a39b351b2cb813a6bf8c7e92982b039d8e1524c73bb934a4f85afdf3dcf61ae538662b141079a6dff9bea30370742163d2a647d5386dccec94888e2c71b24b13c4d9bc9c5ef5c8ca75b691da872adfb84685accb0b1676b6dcb53b8c6a524785f2c9d86d2fe65929d67a2a28831620bbfdacb6f232bdd3c252bb59ff4a20f5ec1f8de974391d3a2e3fdd4037e46ef6043931694c24fbf26cd2e64ec3ef65c00ed0700b2df3573873f032e26a18b89545d169070617bbd1e069b6764c2e30c0ef9919e62d702a62e0720eb9db41be8020fb74d76230c51c9aa08c5aa", 0xdd, 0x2, 0x0, 0x3}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x8, r2, &(0x7f00000002c0)="af00ca1e25c74d9af8366b3939c52607b2c4b9cc984f4439c00584bb58cb0cc12f553ecca8a5f96ff57991e642a4aadae71682faf00e993c6ffd07e9599f2470c232fe080fefba3a78ff42d4e868e69715e748c7f883f9716920fb7865f2710bc283e2a71f2d3be4a74f402dbce1c92111cd0a0c0062a3", 0x77, 0x100, 0x0, 0x2}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x5, r0, &(0x7f0000000500)="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", 0x1000, 0x1400000000000000, 0x0, 0x1, r5}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x8, 0x3, r8, &(0x7f0000001580)="6926eab97784f376531e1946a4ee6535ad6dc41269b0838c62", 0x19, 0x5, 0x0, 0x1, r5}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x2, 0x5, r9, &(0x7f0000001600)="97ab7e3753895fd0099e90fa61d2f7297f9541bf40e4025be503789e42f8c822d82ceed12a42f40e80ca7cfaa3afc4db444ea7f5b80b9062ef4b6c4daaedf38685747453bb12876bfa1d30c37771561d60feba349d73edc5b10de12fbd99017b0cbc436bcbd4cdf31695ee37ae764380997e8bb52dc4bcd3aae2b0f6", 0x7c, 0xba91, 0x0, 0x3, r3}, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x8, 0x0, r10, &(0x7f0000001b40)="9115864658634c9c8e1fabc94ed22fe7b17c8511a8027cf2d73c21ba409001b4aaef671fee19144c63e842f8a5ff47b1e486c86b81247f1af34e7d08bf83f43dc651347c9caef7c7ba0deb6f7cd8cdd12c1be57fb352e8a2ce1140fce4c7335bf1192d9ef5a85f3924bdd4e90e1f1edc94d5", 0x72, 0x8001, 0x0, 0x1, r11}, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x6, 0xea42, r2, &(0x7f0000001c00)="da344eb22b83701b23ab8ade985f1c4cffef99682abe4ec5d4c37923f47ce17541416c3b8f8df88f1575c08d838c28ca280b2a9c7623f894d77a1b2f677621d947108e21576e38adce2fd378334da9bfa2818f83417b4f9b113ce516d38ce9f10892dd2cb6182b5cc28f77f59d591863690fa2abe15810bec0124db6d0e271a7773a2254a82bb8fb4c4f955fc0e97b1010737b832aae4659b6f9ecda880980396e68e9f4882bead76ae8e3cf543e4a55b17405ecd2cd5197a200727dcb96b2935117a56566ab329708a5dd8da7f1ad90bd7c4881c28fb6cfde316d87effe", 0xde, 0xffffffffffff7ffc, 0x0, 0x0, r2}, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x5, r0, &(0x7f0000001d40)="480b5bf4d9c9d4e92a3c91f239c0abc1593a3ceaa92cb250764a94761b951edb59286f4b899f52a6f46eccb47f404ea0a9423f69bb3ac30566ef570a84463fae7226df6fa3fb9fa0b8951a43feb952f09bb65a5eb405eec2a9565ab29574bb59ee39987058f16eb2050b9f914bad57895ab82ea65242ba6393fb29ca7563ccf4995478c14269271b275426bbe563ebff5de056862c21377cb25b4ec14e18f8dbb23346fb6116584eafdcc95069dd77eeb7de87d1627b6d7336f6c75fd7b05d16ccd503f1adfa4ca7d91ddd58bafd8e012821f2c3a278238a650f6440c0c28af833e84079fb2c91f28bf48906cd4aa57c14a090da199496f3", 0xf8, 0x200, 0x0, 0x2, r2}]) [ 1463.146622] audit: type=1804 audit(1634692049.830:2074): pid=7233 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/512/bus" dev="sda1" ino=14758 res=1 [ 1463.252271] audit: type=1804 audit(1634692050.130:2075): pid=7266 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/513/bus" dev="sda1" ino=15064 res=1 01:07:30 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x4e22, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1463.372614] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) [ 1463.427001] audit: type=1804 audit(1634692050.300:2076): pid=7280 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/513/bus" dev="sda1" ino=15064 res=1 01:07:30 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r1, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140), 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) 01:07:30 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x80242, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000}, {0xa, 0x4e23, 0xfffffff8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4ba8}, r2, 0xffffc170}}, 0x48) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) dup2(r0, r3) [ 1463.965798] nla_parse: 6 callbacks suppressed [ 1463.965808] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xc00}, 0x0) [ 1464.089715] validate_nla: 14 callbacks suppressed [ 1464.089725] netlink: 'syz-executor.4': attribute type 7 has an invalid length. 01:07:31 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6000, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1464.166917] audit: type=1804 audit(1634692051.040:2077): pid=7280 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/513/bus" dev="sda1" ino=15064 res=1 [ 1464.176374] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:07:31 executing program 3: read$usbfs(0xffffffffffffffff, &(0x7f0000000240)=""/119, 0x77) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) 01:07:31 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x5, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x9) fallocate(r4, 0x20, 0x0, 0xfffffeff000) fallocate(r4, 0x0, 0x0, 0x10000101) [ 1464.326140] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xb2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:07:31 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) dup2(r0, r1) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x1) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xfffffff9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, {0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}, 0xf21a}, 0xffffffffffffffff, 0x4}}, 0x48) [ 1464.501260] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:31 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x80fe, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xe00}, 0x0) 01:07:31 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r2, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) fcntl$setflags(r2, 0x2, 0x1) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) [ 1465.089759] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xba}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:07:32 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) dup2(0xffffffffffffffff, r0) 01:07:32 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xc0fe, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1465.452896] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:32 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000140)) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x10001, 0x40) r1 = syz_open_dev$video(&(0x7f0000000400), 0x3ff, 0x101000) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r2 = getpgid(0x0) r3 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0x5, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r5, 0x20, 0x0, 0xfffffeff000) fallocate(r5, 0x0, 0x0, 0x10000101) openat$cgroup_ro(r4, &(0x7f00000003c0)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) [ 1465.526144] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1465.562033] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:07:32 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r1, 0x4, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000340)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) pipe(&(0x7f0000000400)={0xffffffffffffffff}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000440)={0x12, 0x10, 0xfa00, {&(0x7f0000000300), r2, r3}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r0, 0xd1, 0x80000001, 0xfffffffffffffffc}) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x10280, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004240)={0x2020}, 0x2020) lseek(0xffffffffffffffff, 0x4, 0x1) read$FUSE(r6, &(0x7f0000000480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(0xffffffffffffffff, &(0x7f00000024c0)={0x18, 0xffffffffffffffda, r7, {0x80000001}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0), 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r8, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) 01:07:32 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) dup2(r0, r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r2, 0x4, 0x1) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x4000) 01:07:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xf00}, 0x0) 01:07:32 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xfc00, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1465.768294] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1465.775832] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1466.078298] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xc8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:07:33 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004e00)=[{{&(0x7f0000000240), 0x6e, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/115, 0x73}, {&(0x7f0000000340)=""/184, 0xb8}], 0x2, &(0x7f0000000440)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000004c0)=""/122, 0x7a}, {&(0x7f0000000540)=""/143, 0x8f}, {&(0x7f0000000600)=""/30, 0x1e}, {&(0x7f0000000640)=""/205, 0xcd}, {&(0x7f0000000740)=""/95, 0x5f}, {&(0x7f00000007c0)}], 0x6, &(0x7f0000000880)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f00000008c0), 0x6e, &(0x7f0000001a40)=[{&(0x7f0000000940)=""/83, 0x53}, {&(0x7f00000009c0)}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/9, 0x9}], 0x4, &(0x7f0000001a80)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x118}}, {{&(0x7f0000001bc0), 0x6e, &(0x7f0000001c40)}}, {{&(0x7f0000001c80), 0x6e, &(0x7f00000031c0)=[{&(0x7f0000001d00)=""/101, 0x65}, {&(0x7f0000001d80)=""/140, 0x8c}, {&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/250, 0xfa}, {&(0x7f0000002f40)=""/41, 0x29}, {&(0x7f0000002f80)=""/41, 0x29}, {&(0x7f0000002fc0)=""/211, 0xd3}, {&(0x7f00000030c0)=""/232, 0xe8}], 0x8, &(0x7f0000003240)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f0000004900)=[{&(0x7f00000033c0)=""/30, 0x1e}, {&(0x7f0000003400)=""/79, 0x4f}, {&(0x7f0000003480)=""/253, 0xfd}, {&(0x7f0000003580)=""/4096, 0x1000}, {&(0x7f0000004580)=""/233, 0xe9}, {&(0x7f0000004680)=""/97, 0x61}, {&(0x7f0000004700)=""/130, 0x82}, {&(0x7f00000047c0)=""/139, 0x8b}, {&(0x7f0000004880)=""/69, 0x45}], 0x9, &(0x7f00000049c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000004cc0)=[{&(0x7f0000004a00)=""/208, 0xd0}, {&(0x7f0000004b00)=""/136, 0x88}, {&(0x7f0000004bc0)=""/204, 0xcc}], 0x3}}, {{&(0x7f0000004d00)=@abs, 0x6e, &(0x7f0000004d80), 0x0, &(0x7f0000004dc0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x8, 0x10140, &(0x7f0000005000)={0x0, 0x3938700}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) [ 1466.218276] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:33 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xfe80, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:33 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @ib={0x1b, 0x3, 0x6, {"3be13caddb0864d061985acc37de8ab2"}, 0x7fff, 0xf5ee, 0xffffffffffffffa5}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r3, r0}}, 0x18) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x4200, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r3}}, 0x18) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) dup2(r0, r5) 01:07:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x2380}, 0x0) 01:07:33 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) read$usbfs(0xffffffffffffffff, &(0x7f0000000780)=""/4096, 0x1000) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1c, 0x110, r1, 0x8000) r2 = getpgid(0x0) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0x5, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xad) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r5, 0x20, 0x0, 0xfffffeff000) fallocate(r5, 0x0, 0x0, 0x10000101) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000040)={0x3, 0x7b, {0xffffffffffffffff}, {0xee00}, 0x5, 0x7d71}) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x46, 0x1, 0x20, 0x7, 0x0, 0xfffffffffffffff7, 0x4, 0xf, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x7fff, 0xffffffff00000000}, 0x1000, 0x4f79576d, 0x800, 0x7, 0x5, 0x0, 0x8d6}, r6, 0x2, r4, 0x0) [ 1466.361827] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1466.440036] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:07:33 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000003c0)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400203, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x20, 0xffffffff}, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000005e80)) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xffffffb2, &(0x7f0000000580)=[{&(0x7f0000000600)=""/167, 0xa7}, {&(0x7f00000002c0)=""/118, 0x76}], 0x2, &(0x7f00000006c0)=""/12, 0xc, 0x7301}, 0x3f9c) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x17, &(0x7f0000000400)=[{&(0x7f0000000340)="4f15a39a2df43b14ed5f2c578d4db055ee07f5a3d802cf8b50b4e7df21e18cb5fc59569f9e048c6343d4d93a8de61654aea60f37d00726bbbaf8413fa35f711e8ebd6b86b0d049ac43de63ad10d251b4fdb14d20706d042b10384fce5ec562f80eea2946c9cfc7f1078325732582af6da35442dfadaacf63643c41a7e5f882e09016d46b27739751f7cb3c9747d087919a9ce3b13b0c9a2774a54d8d5a2c5053ac2eebb14cad", 0x100000}, {&(0x7f0000000240)="ae61a8d192171409dc2c19809ce70f90c61b402d89906f876fbb89196fa57c9dd7ed6fe73d4a9a050d32416a7e622c1c9943ab04d4e7db1546fab943d95d0a7057459e2d58c83e7f97ddda17b3aff67efc92f873b90a00b5d3c8226357fc7dce76f9ccb0c757e1f3f3d77ab2c382b1f474dbfc9f", 0x1000000}], 0x47, &(0x7f0000000000), 0x0, 0xb9efff7f}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x80040, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r5, 0x4, 0x1) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r7, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000500)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x6cb3b0db, @private1, 0x6}, {0xa, 0x4e24, 0x1f, @private2}, r7, 0xf7}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0), 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2}}, 0x20) 01:07:33 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xfec0, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1466.585255] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:33 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, 0xa0af36438af7301}}, 0x18) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) dup2(r0, r1) [ 1466.629573] kauditd_printk_skb: 9 callbacks suppressed [ 1466.629634] audit: type=1804 audit(1634692053.500:2087): pid=7480 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/516/bus" dev="sda1" ino=15009 res=1 01:07:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xce}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) [ 1466.811016] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1466.876855] audit: type=1804 audit(1634692053.580:2088): pid=7486 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/516/bus" dev="sda1" ino=15009 res=1 01:07:33 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x111, 0x1}}, 0x20) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) 01:07:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x5865}, 0x0) 01:07:33 executing program 2: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r1, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) r2 = dup2(r1, r0) read$usbfs(r2, &(0x7f0000000000)=""/127, 0x7f) [ 1467.000758] netlink: 'syz-executor.4': attribute type 7 has an invalid length. 01:07:33 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xff00, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1467.049057] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1467.182485] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:34 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) dup2(r1, r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r2, 0x4, 0x1) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0xfffffffe, 0x10, 0x10, 0x0, @ib={0x1b, 0x62, 0x2, {"e5dc24b76402289b63e1a36c05553e35"}, 0x5, 0x9, 0x6}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xab, @remote, 0x7f}, {0xa, 0x4e20, 0x0, @mcast1}, r4, 0x80000000}}, 0x48) 01:07:34 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x40000, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:34 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000001c00)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xfe000000, @ipv4={'\x00', '\xff\xff', @local}, 0x42}, {0xa, 0x4e21, 0x3, @private2, 0x3}, r1, 0x9}}, 0x48) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x1, 0x0, {"8a93708cb14a1652d44e413886ebd363"}, 0xfffffffffffffff7, 0x3, 0x401}}}, 0x90) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000003c0)=""/147, 0x93}, {&(0x7f0000000480)=""/123, 0x7b}, {&(0x7f0000000500)=""/210, 0xd2}, {&(0x7f0000000600)=""/32, 0x20}, {&(0x7f0000000640)=""/60, 0x3c}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/144, 0x90}, {&(0x7f0000001740)=""/73, 0x49}, {&(0x7f00000017c0)=""/179, 0xb3}, {&(0x7f0000001880)=""/237, 0xed}], 0xa, &(0x7f0000001a40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r4, 0x4, 0x1) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000001bc0)={0x12, 0x10, 0xfa00, {&(0x7f0000001b80), r1, r4}}, 0x18) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x4e24, 0x7, @private0, 0xc0000000}, r2}}, 0x48) [ 1467.410883] audit: type=1804 audit(1634692054.290:2089): pid=7486 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/516/bus" dev="sda1" ino=15009 res=1 [ 1468.063882] audit: type=1804 audit(1634692054.940:2090): pid=7501 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/516/bus" dev="sda1" ino=15009 res=1 [ 1468.142155] audit: type=1804 audit(1634692055.010:2091): pid=7501 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/516/bus" dev="sda1" ino=15009 res=1 01:07:35 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x5, 0xa0ac) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r4, 0x20, 0x0, 0xfffffeff000) fallocate(r4, 0x0, 0x0, 0x10000101) 01:07:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xee}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:07:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x6000}, 0x0) 01:07:35 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) dup2(0xffffffffffffffff, r0) 01:07:35 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1000000, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:35 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r0, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @broadcast}, @in={0x2, 0x0, @remote}}}, 0x118) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000140)=[0xfffffe00], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r0}}, 0x18) [ 1468.460832] audit: type=1804 audit(1634692055.340:2092): pid=7593 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/517/bus" dev="sda1" ino=15044 res=1 01:07:35 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x5, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = mq_open(&(0x7f0000000300)='/dev/cachefiles\x00', 0x80, 0x180, &(0x7f0000000340)={0x200, 0xbf48, 0x81, 0x2a9f}) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r4, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x5) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r5, 0x20, 0x0, 0xfffffeff000) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x10101, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000140)={0x66f, 0xff6e, 0x200, 0x3, 0x2, 0xfff, 0x800, 0x0, 0x0}, &(0x7f0000000180)=0x20) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f00000001c0)={r7, @in6={{0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80000000}}}, &(0x7f0000000280)=0x84) open(&(0x7f00000002c0)='./bus\x00', 0x100000, 0x18e) fallocate(r5, 0x0, 0x0, 0x10000101) 01:07:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x6558}, 0x0) 01:07:35 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getgid() getgroups(0x4, &(0x7f00000000c0)=[0xffffffffffffffff, r2, 0x0, r2]) r3 = getpgid(0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = getpid() perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x40, 0x6, 0x8, 0x0, 0x4, 0x10408, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xcd, 0x2, @perf_config_ext={0xb46f, 0x30000000}, 0x100e0, 0xbb78, 0x3f, 0x2, 0x3, 0x262, 0x6024, 0x0, 0x93fe, 0x0, 0x1f}, r5, 0xd, r4, 0xc) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r7) r8 = getgid() getgroups(0x4, &(0x7f00000000c0)=[0xffffffffffffffff, r8, 0x0, r8]) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) r10 = perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x80, 0x40, 0x2, 0x4, 0x0, 0xfff, 0xa000, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3d, 0x4, @perf_bp={&(0x7f0000000100)}, 0x1800, 0x2, 0xffff, 0x6, 0xef0d, 0x40, 0x401, 0x0, 0x8, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) r11 = syz_open_dev$sg(&(0x7f00000001c0), 0x9, 0x40) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbff, 0x10000000}, 0xc, &(0x7f0000000040)=[{&(0x7f00000003c0)={0x3a4, 0x14, 0x2, 0x70bd28, 0x25dfdbfd, "", [@typed={0x8, 0x48, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x38b, 0x3e, 0x0, 0x1, [@generic="a1900285643226a5544edc184dcb731d8641140316181be7efc0d55d21f6b8cefe9695f4d794fa7dbb2cd5312eba593d0e1f26eafe0bbc5a024b3a35817df99bbefe482138107d019be3e585675657f1a350d073c3d2e8e513b27c47d28b8a13bae37991616721486738719fbc62f5164b33c26c546f3336968ae28c8e78431ed8b785b0d36dd3745ace78e43e82a5bc97f079deb1b9197f9e2735a5132008a51c978fe449ef1c2ebc9394d9fc737851dde3ba81238bcd7698286c92c5f3d6bd6b04ce09f6024d974f9155c307b400cae0ce186caeb4deb97b3ab6630d336fe1dc3cfb4116503271", @typed={0x9, 0x36, 0x0, 0x0, @str='.-*[\x00'}, @typed={0x8, 0x4e, 0x0, 0x0, @fd=r1}, @generic="72835b8f86bc260133a6c4a1e2c547a49e03ec3c025cd513d6450c277ac48a7fcfe49c607fd9fdc3de12231571ada2e5d4f9856f61c0d6378d83d4199094f80870f0bc8218386947b512435a10d427a9e006e166335a0fdb36068d1284a744e8", @generic="c78282f283fca6c812e87e3d6a67ac5f276c42de481a613531c42d7e3b7f754cbc2c11bab1aa1bbc76fb4f1d5e71fd0cbd774bf26de17e09c88af9bb46494c18b8929e3600df51b1ae00", @generic="89e43ca3d3e5d980672a5b2cfa4bac61364917e5cd2ef4070f34ebddf7a46410a22a332d81941dd50dc9105a29c4341585aa420ebc7497f996de782342995870b07f04cbd288c530bff38cf32679f5a6a66581c93cc81d2d704b4f7fad57506e0d57f2a896b2f260", @typed={0xc, 0x2c, 0x0, 0x0, @str='[#5&(][\x00'}, @generic="3cd5ed067eb3cf90daa6c8306b75a992195c3a979511d0f451b712292fc99b24d73dc1fceed02709b731d1eed58ca9199c1c7c664a06f458b4213d56e3d7310e693b7524076273a67860c613fdf4300c4eb64cfc77e79f11972208010c5fc7ccc3e0305ae31f6ff392c4f86b92c4ab038a1cae6a9480f1033df363d568fce1c3f0bcd7bc1b", @generic="7268f8ab4934e480fb80ce09be72b346133289b4f183cd718315cabbaad254b73930f5156e2df1b9a87e04a1d9ffa1504e946c0f305606fd1a7bfb7ef59cf33f1a8b2495b0f7f7f482eba8f4fcd05a928b24e27115304ec6c4ff23eb106de34d160093d9d00d82ea37f511f7e5951c1777d96b07fdfede82410a6ee418f48396765031ca11380d56dbb41ddfbce23e429ab9c52a2d2a351df38cdf96261ccdf7f5845dd7ca128fe2c97641ae39f12dfd1d8e76de16", @generic="996b0119c7c9dff11b9233606b5584d4f43e34fb94692349de06e39a2c8d882815bfa6087e8f2008594c344c5b1d33ef75a3e7"]}]}, 0x3a4}, {&(0x7f0000000780)={0x4c4, 0x24, 0x800, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x1c, 0x50, 0x0, 0x0, @str='/dev/infiniband/rdma_cm\x00'}, @typed={0x8, 0x14, 0x0, 0x0, @ipv4=@multicast1}, @generic="d678211d46241aaffeddf926ad00f1ca1d5a", @nested={0x173, 0x76, 0x0, 0x1, [@generic="5f3722c882cdbf82b680c2ab43a456b835c0d9caff4e9a9b59ce4e0dd5b2d6662a56199201012224c9a333fad1b7ffbc9f5405a209b4110eb7e32a409836f2f28a72b0ea7c49c73544bdbd38b202fc81199ea8f8ab5c700b0415aadb82868c01e3d23fbccfc0585f738e1db9086ea38eea7ffa633b2c4580c3938ec2262b04f767e6c666b4e7dc2efe48c536dbc1a9e144b3ae64f9feefa6364e10d620a1844f563c194f", @generic="6c766416f7410b2d36a0d5e3e82031b0a0b7a0132730070d685d34fe266fb705c3907e021960e459a37c709a572e8d6dc59fc7220d1bb01808776d0265fc1a9000bf59a5f3b995cb004ff5f5e814b00b1d8642c289fcb1c9ae5c5e9d4b6edbccb4034e1a9ef3cb2a3d607b09507ef435b72dffb4a62b3f2424c2f3328d11128123504a511b7e58c8a022d4296d493b32183938d025b37a35045e7953a7f358487d1de839313eb2b2ed70800fa42997d5eccbf4b5b42c34eea476166f038b37", @typed={0xc, 0x7f, 0x0, 0x0, @u64=0x8}]}, @typed={0xd4, 0x7e, 0x0, 0x0, @binary="15167ab305b087c1926c45683672dc7fda4afd2b380df80f81d28db675c6c10096eda694b7b5d1647845f4142d64e67c58e7477af71c434077a5d90b816ee5d9c710e63dc0277ecdf0645bc9720e8124fede188a4a3824fcd387ed54238e9e10d9bda00c935060cc55aa353070bf10f6fc236d5567c54c1b76d9e22e39b212100c7068e379d6a404582e79e8a8b4a78f75a02ff51566e0eb9f96bc2123947544021e5e7d80ffe6090d1609e7ba1a3f88deb6fc09d0ce697c3823064e4dda779bf646b36d56e2171731f7d2b36b0021b8"}, @nested={0x147, 0x79, 0x0, 0x1, [@generic="71e8198b6c8d9ff85983ec236550e16e5225d2da21cb271bab78adb006068642242c09898f6c3d6c57a3fc03098c731fca8bc1bd94b1022aa2375ac0e58d695694c4607ccbb64733d589388f656af9414917a0bcca7b3ffbcc80161136253928a79fd96aab61fa80147d996ceedf3c023c2cbd84ba0d90178f5fc1d9f4478bb3c5f4b94880e933ae48963667414c74d3bb", @typed={0x1c, 0x93, 0x0, 0x0, @str='/dev/infiniband/rdma_cm\x00'}, @generic="2dc1dd296212b8e50f65d988f6f92ca218833076b72c8835865105e8a5b5e45734b8a6e4e304ff7a16c4a0040f9c30abcc421fc6081629c721ef328742eddad18c0a8f280f6ff1b9d14f9dd06d840bf7be8bdd24d9a12ea89c62c85fbe0354cc4cfa8a7cb6790ce0cae1b88d2fe3c785a6a0468b2034cb387da7af1797ddf281d349222573e7a6747319d0852f73d07d564543c26092", @generic]}, @nested={0x50, 0x81, 0x0, 0x1, [@generic="dd5525cb40f53193ed69b02c70806a7467c32eaea6d46d8478cb6a1dd61073e142523004057748430d678a13ae46019dc07832203c03f5b7b541dc45464d79d5", @typed={0xc, 0x3f, 0x0, 0x0, @u64=0x8}]}, @generic="1b687244842e17b6968a791f664354128dfb8d4a051ea008ecc4677e4ab24f06e06a624002fd671c8852a794d22ae784ce6fa16cdca3b86af154", @generic="b1decc3c3d3f1da2eb1bb34c5937e1002984655b30385257aa9fe9521ff28462aeddddecef70952fe17d071a1751500957d45e3249e2b3da761c4c352d035e56fd8f4d424406a6875099373db2f297e637f54ed9fc51a2b39e5d96edf4c14e906b7b"]}, 0x4c4}], 0x2, &(0x7f0000000200)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, r2}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r5, r7, r8}}}, @rights={{0x20, 0x1, 0x1, [r0, r9, 0xffffffffffffffff, r10]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x18, 0x1, 0x1, [r11, r12]}}], 0xf8, 0x20000000}, 0x1) dup2(r0, r1) [ 1468.678637] audit: type=1804 audit(1634692055.370:2093): pid=7593 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/517/bus" dev="sda1" ino=15044 res=1 01:07:35 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x2000000, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:35 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r3 = dup(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000140), r4, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) 01:07:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) [ 1468.897148] audit: type=1804 audit(1634692055.710:2094): pid=7624 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/518/bus" dev="sda1" ino=15093 res=1 [ 1468.922503] audit: type=1804 audit(1634692055.730:2095): pid=7624 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/518/bus" dev="sda1" ino=15093 res=1 [ 1468.950795] audit: type=1804 audit(1634692055.740:2096): pid=7624 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/518/bus" dev="sda1" ino=15093 res=1 [ 1469.164146] validate_nla: 6 callbacks suppressed [ 1469.164157] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1469.238545] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:07:36 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x4000000, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:36 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/150, 0x96}, {&(0x7f0000000180)=""/155, 0x9b}, {&(0x7f0000000240)=""/110, 0x6e}, {&(0x7f00000002c0)=""/80, 0x50}], 0x4, &(0x7f00000003c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}, 0x40012021) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000640)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000006c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000440), r2, 0x1}}, 0x18) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f0000000000)=0x1, 0x4) dup2(r0, r3) 01:07:36 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x10001, @empty, 0x80000001}, {0xa, 0x4e20, 0x7, @remote, 0x1000}, r5, 0x3}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) [ 1469.785891] nla_parse: 4 callbacks suppressed [ 1469.785901] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:36 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) getpgid(0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x996, 0x4, @perf_config_ext={0x8001, 0x800000fff}, 0x0, 0xffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000)=0x5, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x20, 0x0, 0xfffffeff000) syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) fallocate(r2, 0x14, 0xffffffffffffffff, 0x5) 01:07:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x8100}, 0x0) 01:07:36 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x7000000, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x1c4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:07:37 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1, 0xfff}}, 0x10) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) dup2(r0, r2) syz_open_dev$ptys(0xc, 0x3, 0x0) 01:07:37 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x738, 0x9b, 0x9, 0x8000, 0x4, 0x1], 0x6, 0x0, 0x0, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x5, @local}, {0xa, 0x4e24, 0x3ff, @mcast1, 0xffff6f16}, r4, 0x81}}, 0x48) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x10000) r6 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r6, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000500)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r6, &(0x7f0000000580)={0xb, 0x10, 0xfa00, {&(0x7f0000000440), r7, 0x8}}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000001c0)=0x5, r1, 0x0, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r8, 0x9, 0x10, 0x10, 0x0, @in6={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x6}, @in={0x2, 0x0, @rand_addr=0x64010100}}}, 0x118) [ 1470.237823] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1470.328976] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1470.336412] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:07:37 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x8000000, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:37 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0xa}}, r3}}, 0x30) r4 = dup2(r0, r1) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000240)={0x12, 0x10, 0xfa00, {&(0x7f0000000140), r3, r5}}, 0x18) [ 1470.515092] device bridge1025 entered promiscuous mode 01:07:37 executing program 3: mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x9843d000) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r0, 0x4, 0x1) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000140)={0x18, 0x1, 0x0, {0x401}}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) [ 1470.545285] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1470.573442] netlink: 'syz-executor.4': attribute type 7 has an invalid length. 01:07:37 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x9000000, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1470.604169] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:07:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xe803}, 0x0) [ 1470.680457] device bridge1025 left promiscuous mode [ 1470.718652] device bridge1025 entered promiscuous mode 01:07:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x1ca}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) [ 1470.841371] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:37 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x5, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x210040, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0xa40, 0x0) fallocate(r4, 0x20, 0x10000000000000, 0xfffffeff000) fallocate(r4, 0x0, 0x0, 0x10000101) 01:07:37 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) dup2(r0, r1) 01:07:37 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xe000000, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:37 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) [ 1470.992868] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1471.012816] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1471.162913] device bridge1026 entered promiscuous mode [ 1471.185995] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1471.218085] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1471.373964] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1471.400703] device bridge1026 left promiscuous mode 01:07:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xf000}, 0x0) [ 1471.432717] device bridge1026 entered promiscuous mode 01:07:38 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x224e0000, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x1dc}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:07:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) getresuid(&(0x7f00000001c0), &(0x7f0000000240)=0x0, &(0x7f0000000280)) r3 = getgid() getgroups(0x4, &(0x7f00000000c0)=[0xffffffffffffffff, r3, 0x0, r3]) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000002c0)=@nat={'nat\x00', 0x19, 0x6, 0x844, [0x200003c0, 0x0, 0x0, 0x20000546, 0x200006dc], 0x0, &(0x7f0000000140), &(0x7f0000000cc0)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32, @ANYRES32=r3, @ANYBLOB="060000000000000072617465657374000000000000000000000000000000000000000000000000004800000000000000766c616e300000000000000000000000767863616e31000000000000000000002200000040000000010000000300000008000000000000007f000000000000000300000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000feffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000001000000030000005500000000f976657468315f746f5f6261746164760076657468305f746f5f626f6e64000000626f6e645f736c6176655f310000000076657468315f746f5f62617461647600ffffffffffff0000ff00ff00dd55cbbc6f37feff00ff0000ae0000001e0100006601000071756f74610000000000000000000000000000000000000000000000000000001800000000000000010000000000000003000000000000003d09000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000dccfd7b8e93c0000fdffffff00000000736e61740000000000000000000000000000000000000000000000000000000010000000000000000000000000000000feffffff000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a30000000000000000000000000403f000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000feffffff02000000050000007400000088096272696467655f736c6176655f310000766c616e30000000000000000000000076657468300000000000000000000000767863616e3100000000000000000000aaaaaaaaaaaaff0000ff00ffaaaaaaaaaa2800ffff00ffff6e000000160100004e0100006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000ea0b0000ff0f050000000000769a8a4453e5c6f8257f366471989f411e4b578600877b1d0844e6a04c569139808227b2f725c2d078f65b8572abdc80e3264c6357839257a65d3f13894e8e7c00000000434c4153534946590000000000000000000000000000000000000000000000000800000000000000d38f000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000bbbbbbbbbbbb0000feffffff0000000005000000100000009100626f6e6430000000000000000000000076657468305f746f5f62726964676500766c616e30000000000000000000000076657468305f746f5f7465616d000000bc58fd94fddeffff000000ffaaaaaaaaaabbffffff00ffffae000000e60000001e010000737461746973746963000000000000000000000000000000000000000000000018000000000000000100010008000000090000000900000001800000000000006172707265706c7900000000000000000000000000000000000000000000000010000000000000003fc94c0b417c0000fcffffff000000006172707265706c790000000000000000000000000000000000000000000000001000000000000000701fb6baca380000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000004000000ffffffff020000000900000071000000001673797a6b616c6c6572300000000000007767320000000000000000000000000069703667726530000000000000000000767863616e3100000000000000000000aaaaaaaaaa21ffff7fffffffffffffffffffffffff0000ffde000000460100007e0100006d616300000000000000000000000000000000000000000000000000000000001000000000000000bbbbbbbbbbbb000008000000000000006d616300000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa00000000000000000000434c415353494659000000000000000000000000000000000000000000000000080000000000000000fcffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb00001000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000f05c845db4f80000fcffffff00000000050000003200000093a06e65747063693000000000000000000076657468315f766972745f7769666900000000000000000000000000000000006e723000000000000000000000000000aaaaaaaaaaaa0000ff0000ffc6ebf808a92900ffff00ffff6e000000a6000000de0000006172707265706c7900000000000000000000000000000000000000000000000010000000000000000180c200000300000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000bbbbbbbbbbbb00001000000000000000"]}, 0x976) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x22080, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f00000003c0)={0x15, 0x110, 0xfa00, {r5, 0xb3, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @private=0xa010102}, @in={0x2, 0x4e24, @multicast2}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r8, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) [ 1471.894581] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1471.952841] kauditd_printk_skb: 9 callbacks suppressed [ 1471.952856] audit: type=1804 audit(1634692058.830:2106): pid=7810 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/520/bus" dev="sda1" ino=15118 res=1 01:07:38 executing program 2: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) 01:07:39 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1204, 0x4) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x5, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x10010, r5, 0x70e48000) fallocate(r4, 0x20, 0x0, 0xfffffeff000) fallocate(r4, 0x0, 0x0, 0x10000101) [ 1472.070671] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1472.106328] device bridge1027 entered promiscuous mode 01:07:39 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) 01:07:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x34000}, 0x0) 01:07:39 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x3f000000, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1472.254820] audit: type=1804 audit(1634692059.130:2107): pid=7854 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/521/bus" dev="sda1" ino=14853 res=1 [ 1472.269077] device bridge1028 entered promiscuous mode 01:07:39 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000000)={0x3, @null, 0xffffffffffffffff}) syz_init_net_socket$ax25(0x3, 0x2, 0xcb) dup2(r0, r1) [ 1472.439129] audit: type=1804 audit(1634692059.180:2108): pid=7854 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/521/bus" dev="sda1" ino=14853 res=1 [ 1472.479388] audit: type=1804 audit(1634692059.350:2109): pid=7865 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/521/bus" dev="sda1" ino=14853 res=1 [ 1472.489157] device bridge1029 entered promiscuous mode 01:07:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x1fd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) [ 1472.535192] audit: type=1804 audit(1634692059.400:2110): pid=7865 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/521/bus" dev="sda1" ino=14853 res=1 01:07:39 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x48000000, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1472.612780] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:39 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @broadcast}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000740), 0x106, 0x1}}, 0x20) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000004c0), 0x106, 0x3}}, 0x20) sendmsg$unix(r4, &(0x7f0000000480)={&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000440)=[{&(0x7f00000002c0)="14b88b759d18d617dc025a91df74f2e4621f4e9253d75a496c2113ea3f589d04ef012164f1df442e962265610c9139ba56b4754b55a3dfde613869ac94684fcab80b3872bb86a82de03e75005885f39d6b44c807663793437f90c0c5b8842ca1849881004d6079d4bd0372a97d49dc1d67c73bdcb365e3c082a57a7a9be8e030d9e4455bfcbae848323841eff384356ef7cb59526cb66f5a0d355846a9ea45f5830db374fd31f26325682e031c1284", 0xaf}, {&(0x7f00000003c0)="8bb0f645cf5f7f0d201859b86c7eb6a3420aba68a39d2368e5a13f83eb05dfc5d85c5a26780764ff3aa2942532e5daf05b64b91c352cfad79d4b0e0df96144c175b188", 0x43}, {&(0x7f00000001c0)="c69f1974599d1549833c9d4d9f732fbed241fe4db036851511f94e3af40eb35b3d18f8", 0x23}], 0x3, 0x0, 0x0, 0x840}, 0x8000) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000007c0)=0x575) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000600)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @local}, @in={0x2, 0x0, @local}}}, 0x118) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/zoneinfo\x00', 0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r7, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f00000005c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000580), r7}}, 0x18) 01:07:39 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x5, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r4 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x7fffffff, 0x9, &(0x7f00000005c0)=[{&(0x7f0000000180)="c026dbaf3579affc743b0ee26ebe0d7bfd", 0x11, 0x5}, {&(0x7f00000001c0)='w', 0x1, 0x1}, {&(0x7f0000000200)="2eb8fcc830337f95d18f65e899407b1ecf72afee0c2b1484d9513951037891f5197d005c4d25f7374cd392c2b6e743d8af2ace6521047035d3cb96a2e4a20db9dd33a7e83f8ef627b9205cd1442486df922792fbebd62d4c17bb862aaf231c4698b9a10843a903515f4a80e51b67920e7ac1779d2a493bb2a7a5983d54be4699fe7bd5ec47e9fedb72d215605cc50fa838188edb0c3e2f065f112cf865d5b7db38b454c4e98d905ed3f41f5327205102fa01c376ae594bc7d0785cfaa7e88f0cd76b44eafd3c56ec9dee8f727bdde27fb3016720f8bcfbd3fb85eeab862bcb968b077384266f8bfb23a215c6801535ce3b", 0xf1, 0x4}, {&(0x7f0000000780)="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", 0x1000, 0xfffffffffffffffe}, {&(0x7f0000000300)='.', 0x1, 0x7}, {&(0x7f0000000340)="769635f1f24213cda1b339350b98232386a4ef7e10d73023077d4ac9f34cd90bfae5e898f483ae6d21f50000eb873331d558e2f436646c739a5a27542f86e7e96a221d65ef6171495019048bf76bc842f46c569725d03bd895a451adca526a921668dbf89f196aea95f5700a1046d78137bb83f0ca0f159e57510538225ac65d847cef8af9e664fe43e44cf00a5695289f65624a6f94cf97af046eb68196914f661bf44260a35faf4bfd16877cbe6863ced6daf877ae00da9804efb6f879be9006c03fd161e3f1eecebddb5fed9c70f94b3c9517616a30c15c6500a6570e02809dbc935fef17c3f0a0d1855a4bb2b6bf06e0116c", 0xf4, 0x7}, {&(0x7f0000000440)="f18f6914167fd5e104c66defe9b9b913df9b94dae5fe3fb2a7b1344553dde20b01087c1a7ee3f218d7d5eb92129261be1f4b16ce9cc487296ec7037bbca6ca0efb1d1dce4b55074fa63f3fd8812e0e7a0d5b40a32e425bba77d275566dfc7dfc66a0ac4f39f36c2d6e224a580de1cbb6c0a54a851b866c1e83ffa36c05d70aa28988c8854a5cc875121fadb2cea7306bb4530835426c67a9b242e75a8a5fc796f350454b1443b2a89c45e7b1ce07054d7b8908d3af6c7322d0add7b6dd852970cdd88a38718fc5e3e9f05c17e75379a66bd476cc96e3c49815d63c3ec65129151c43c1e1133dc739b5", 0xe9, 0x20}, {&(0x7f0000000540)="d3c9a490ba8b9b4bc06d9fc94aaa08dd9e5347c0c3cf2ffec633c1953825e1d2590ca9082fb1c9f89c04f0032c3edd908353e02d", 0x34, 0xfed0}, {&(0x7f0000000580)="be21598a51ce5d65c156b2be95fdd84c8d662a31d927f5538f340caac9bb542d6655f3552a7c5a0b73dc40076c5af28f8e233519c5774dacbae642f820", 0x3d, 0x8}], 0x45000, &(0x7f0000001780)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@i_version}, {@grpquota}, {@grpid}, {@jqfmt_vfsv1}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@appraise}, {@fowner_gt={'fowner>', 0xee01}}]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001800)={{0x0, 0x32, 0x0, 0x7, 0x7, 0x7, 0x5, 0xffff08b1, 0x0, 0x81, 0x1, 0xa4a9, 0x24000000000000, 0x0, 0x1ff}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000002800)={0x0, r5, "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", "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"}) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r6, 0x20, 0x0, 0xfffffeff000) fallocate(r6, 0x0, 0x0, 0x10000101) 01:07:39 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) dup2(r0, r1) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r2, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) getsockopt$ax25_int(r2, 0x101, 0x9, &(0x7f0000000000), &(0x7f0000000040)=0x4) 01:07:39 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x60000000, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1472.843069] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1472.869437] device bridge1030 entered promiscuous mode [ 1472.902330] device bridge1030 left promiscuous mode [ 1472.919588] audit: type=1804 audit(1634692059.800:2111): pid=7903 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/522/bus" dev="sda1" ino=14708 res=1 [ 1472.971457] device bridge1030 entered promiscuous mode 01:07:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x400300}, 0x0) 01:07:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x202}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:07:40 executing program 2: ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000400), 0x4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x16b800, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040), 0x6e, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/172, 0xac}, {&(0x7f0000000180)=""/177, 0xb1}, {&(0x7f0000000240)}, {&(0x7f0000000280)=""/88, 0x58}], 0x4, &(0x7f0000000500)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}, 0x10000) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240), 0x106, 0xa}}, 0x20) openat$cgroup_ro(r1, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) dup2(r1, r0) 01:07:40 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r4 = open(&(0x7f0000000140)='./file0\x00', 0x250000, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000001c0)=0x2, r1, 0x0, 0x0, 0x1}}, 0x20) 01:07:40 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x8dffffff, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:40 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) syz_mount_image$afs(&(0x7f0000000200), &(0x7f0000000240)='./bus\x00', 0x775d, 0x2, &(0x7f0000002280)=[{&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="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", 0x1000}], 0x85040, &(0x7f00000022c0)={[{@flock_write}, {@flock_openafs}, {@dyn}, {@flock_openafs}], [{@obj_role={'obj_role', 0x3d, '{'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x20, 0x0, 0xff, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000, 0x6}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2100, 0x0) sendfile(r2, r3, &(0x7f0000000000)=0x5, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r5, 0x20, 0x0, 0xfffffeff000) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x5000, 0x0) dup3(r0, r6, 0x0) fallocate(r5, 0x0, 0x0, 0x10000101) [ 1473.542689] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:40 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) dup2(r1, r1) dup2(r0, r1) 01:07:40 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xf5ffffff, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xf0ffff}, 0x0) 01:07:40 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip_tables_targets\x00') r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r5}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x383380, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x4, @loopback, 0x5}, {0xa, 0x4e20, 0x101, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80000001}, 0xffffffffffffffff, 0x7fff}}, 0x48) 01:07:40 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x5, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r4, 0x20, 0x0, 0xfffffeff000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1500, 0x4) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='cgroup\x00', 0x800000, 0x0) fallocate(r4, 0x0, 0x0, 0x10000101) 01:07:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x22e}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:07:40 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r2 = dup2(r0, r1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4c80, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x7, 0x7, 0x10000000, 0x100000ff, 0x400, r3, 0x3, '\x00', 0x0, r2, 0x4, 0x2, 0x3}, 0x40) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYBLOB="00163030303030303030303030364d"]) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r5) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup3(r5, r6, 0x0) 01:07:41 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r3, 0x4, 0x1) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @remote, 0x2}, {0xa, 0x4e23, 0x2, @loopback, 0x3}, r2, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x4, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r4, 0x4, 0x1) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r4, 0x8010671f, &(0x7f0000000140)={&(0x7f00000002c0)=""/110, 0x6e}) 01:07:41 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xfc000000, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1474.125963] audit: type=1804 audit(1634692061.000:2112): pid=7998 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/524/bus" dev="sda1" ino=14708 res=1 [ 1474.633001] validate_nla: 10 callbacks suppressed [ 1474.633011] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1474.652185] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:07:41 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r1, 0x4, 0x1) recvmmsg$unix(r1, &(0x7f0000005480)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/196, 0xc4}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/255, 0xff}], 0x5, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}}, {{&(0x7f00000005c0), 0x6e, &(0x7f0000000680)=[{&(0x7f0000000040)=""/45, 0x2d}, {&(0x7f0000001780)=""/253, 0xfd}, {&(0x7f0000000640)=""/46, 0x2e}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/167, 0xa7}, {&(0x7f0000002940)=""/4096, 0x1000}], 0x6, &(0x7f0000003940)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003980)=@abs, 0x6e, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/182, 0xb6}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000003b80)=""/240, 0xf0}, {&(0x7f0000003c80)=""/245, 0xf5}], 0x2, &(0x7f0000003dc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000003e80)=@abs, 0x6e, &(0x7f00000040c0)=[{&(0x7f0000003f00)=""/245, 0xf5}, {&(0x7f0000004000)=""/173, 0xad}], 0x2}}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000004100)=""/33, 0x21}, {&(0x7f0000004140)=""/199, 0xc7}, {&(0x7f0000004240)=""/137, 0x89}, {&(0x7f0000004300)=""/163, 0xa3}, {&(0x7f00000043c0)=""/4096, 0x1000}], 0x5, &(0x7f0000005440)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}], 0x6, 0x40002001, &(0x7f0000005600)={0x77359400}) r2 = getpgid(0x0) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0x5, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r5, 0x20, 0x0, 0xfffffeff000) fallocate(r5, 0x0, 0x0, 0x10000101) [ 1474.706905] audit: type=1804 audit(1634692061.491:2113): pid=8015 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/524/bus" dev="sda1" ino=14708 res=1 01:07:41 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r1, 0x4, 0x1) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000200)={0x13, 0x10}, 0x18) openat(r1, &(0x7f0000000240)='./file0\x00', 0x440, 0x20) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) dup2(r0, r2) [ 1474.826129] nla_parse: 2 callbacks suppressed [ 1474.826140] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:41 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xfe800000, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:41 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xbd9, @loopback, 0x5}, {0xa, 0x4e21, 0xb9, @mcast2, 0x200}, r2, 0x7f}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in6={0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}}}, 0x118) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000140)=0x1, r6, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r7, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) 01:07:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x1000000}, 0x0) 01:07:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x236}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:07:42 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000040)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) r2 = syz_init_net_socket$ax25(0x3, 0x0, 0x8) dup2(r0, r2) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x204100, 0x0) [ 1475.089259] audit: type=1804 audit(1634692061.971:2114): pid=8047 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/525/bus" dev="sda1" ino=15111 res=1 [ 1475.132056] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1475.421531] audit: type=1804 audit(1634692062.061:2115): pid=8059 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/525/bus" dev="sda1" ino=15111 res=1 [ 1475.522583] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:07:42 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xfec00000, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:42 executing program 2: ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f00000003c0)={0x0, 0x7, 0x0, [0x100, 0xffffffff, 0x81, 0x9, 0x3], [0x6, 0xfc8, 0x2, 0x6, 0x1, 0xd0, 0xab3e, 0x401, 0xffffffffffff8001, 0x5, 0xff, 0x0, 0x7, 0x6, 0x0, 0x4, 0x2, 0x100000000, 0x1, 0x3, 0xffffffffffffffc0, 0x30254954, 0xff, 0xffffffff, 0x6, 0x7fffffff, 0x400, 0x5, 0x4, 0x6, 0x8, 0x100, 0x5, 0xfffffffffffff001, 0x3f, 0x9, 0x2, 0x1, 0x1ff, 0x8, 0xffffffffffffffe1, 0x11e1, 0x9, 0x10000, 0x0, 0x3, 0x800, 0x5, 0x380, 0x445d8957, 0x0, 0x7, 0xc000000000000, 0xfffffffffffffffd, 0x7, 0x0, 0x80, 0x8, 0x8b1f, 0xfe96, 0x69, 0x2, 0x0, 0x4, 0x7, 0x5, 0xea07, 0x278a, 0x6, 0x10a772f2, 0x0, 0x9960, 0x1, 0x4000000, 0xffffffffffffffff, 0x10000, 0x6, 0x7, 0x7, 0x8, 0x3f, 0x19, 0x7, 0xffffffffffffff80, 0x6, 0x1f, 0x7ff, 0x1, 0xfffffffffffff220, 0x24658000000000, 0x2, 0xffffffff, 0x3, 0x180000000000, 0x100, 0x8978, 0x8000, 0x5, 0xfffffffffffffffe, 0x9, 0x100, 0x7, 0x3, 0xf13, 0x8, 0x1, 0x20, 0x3a, 0x49, 0x9, 0x400, 0x3a0, 0x0, 0x1, 0xdf, 0x8, 0xb4a7, 0x7, 0x541019a6, 0x380000000000000, 0x7]}) r2 = syz_mount_image$gfs2meta(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3fe03191, 0x2, &(0x7f0000000200)=[{&(0x7f0000000080)="6506cd49c947d15a1f71758a38c3d07bdf68dfc4ad331c1188456ae5d244c71e5df961c8254c7c99862834eba6d3c2ea94085583bb946e8e72ad0e38e7e05728a72f9bed380f100fb44ac91fa0fcc028b45d2d0017c4eac30ca8afb3beaa836949f6119c5221ca", 0x67, 0x8000}, {&(0x7f0000000100)="c592e58b1cf042b2b033cea77fa764920f141d958c469360b595477521b4e7ee32707086b3afa806875f742106a89a4809877ee8f0fa3be977044852e23b63dbec8e59f2d5443b8f8c3b61ec69bacf55227d9ed5efe76976174cf276a26239777cd84d924d527f0594e5c1d6a984e0ee98c4355d99ddcf138161b72acb8d21b60c9f321c68f67ce0e83a025a4d692f8755f2e048fb3d67cf0add112f4987b42bc31d901640bce3a0f28493f731a2ce2ff7bd3f9c5426acb421c093afdcbb8df0ed6e32ab9cefafcea62bd17f38a1d5767de84fd65c5d18f507d18a16c4153161", 0xe0, 0x8fa}], 0x102000, &(0x7f0000000240)={[{'/&})]{'}, {'($^/'}, {}, {}, {'/dev/infiniband/rdma_cm\x00'}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) r3 = perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0x8, 0x40, 0x9, 0x6, 0x0, 0x7, 0x100, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x8}, 0x2200, 0xffffffffffffff99, 0x9, 0x0, 0xfb99, 0x4, 0x8, 0x0, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x3) dup2(r2, r3) dup2(r0, r1) [ 1475.995368] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:43 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x9) writev(r4, &(0x7f0000000880)=[{&(0x7f00000001c0)="69b8de99fda45252f320bc1a1adef6c86538a20b8b2192358627419aa54f5ca28b5f37fb95e9f7624e", 0x29}, {&(0x7f00000003c0)="a3055b49fe43bae5347eeb98b7fee9f3d38416daab5feb5e7322e6a39a387b582f9f39299f99a44703a3cc263f5486c85e9481f151ebcfcd401ea7ecc25e0b41fcd4fbb15d1f5a9b50413a423f125dcb52ee0f5c9cc35f9d470268e1dad7780d09594511b985850e6b748417a4a98b835fa77aaa9f9b5556dcb34b8533ce9e297e5228f77e18409935ba41b35b591cfb8d0dd4e505e82068abdf45dce74da04c6056c8d0d74f9807eb7f9c948fa28048f2f7f813b73e5672bb1803047941459ca22de2dcecd99b016789faab1495d8ae85475a79fc4005d5a17e5c61ac", 0xdd}, {&(0x7f00000004c0)="779a46ba0cb6b2a6fad709b2e7d42321ccb48a01e53720fca4c8c302df20ff950c60064d2dfd827f1aedfffe5ad9c42a750a3c79722809a5f577cf290e87a95282a5ced58e1febc5b506be42a7689f91fa2b5dd88f2b14a4dd3fd4d529bd3ee39173f7b511d56552025ef71bd913e3fb2656602f59239d8ff277a65eaa050438a3217eb98c7b041da6ee6f74a5f63fd425b407f33ed777ead9f227400073bc13160cb2cd5c1eb37cbcfaaec0cfa4385db4b307a58aace6781312d4e36ea2303e0490922e1b0a671178146c93e8b3", 0xce}, {&(0x7f0000000300)="1cc87b62824956a5760451738954408e72a9e7738e8fb7956df591604a8384ddc93a", 0x22}, {&(0x7f00000005c0)="389161686d9f4db83ca0b53be5927cb260c8dfc51636fefbb0c308511f782a59fa82f0730265952b6da93646c0cd7c6c19dc553bbbdc8085f55778bc74efcfec858a46aefcd8ed9c98749dc53c2fb499894d365a95ff7b7b959bfbfdcf388e6cb8e8690758b1636483b96ff0f4c21132379fc56f745bfc6a58e433ed16831449d0fb3cf9c146865af18601819f5e721309d10edd105d5c93f8d8bdb9fb291877d977408d9209ac214e6f745edda78ce31e7a8ea6196794873b1ba797fe03b92cebf39a63e7711fdbe63531b06564c5e54736ba4e5414f6cb6d822c13ec2ff17aa7ae13e1f6466a60", 0xe8}, {&(0x7f00000006c0)="682e8100e790b4cb2a8ea9fbff0db3e8081d4983c9e56b6be1f32960ff7301d706c1b88ea0826d4ba21cc9f96ab3c9ad8a21ea7a9d1a0ca824a2fe839f471119d121f6c8c361e5028d08920815735fa02e5a780cd2dfd4f4593f341dc62197855b9961c96beded14415a116ec64a1ebcf73e396fba6f2acb93bc412ac44a0c3641b8dcef4013b3bf73b940868686506efaf1dafa312edc688972537bfcff65443a3b438097c9ebe83bf81b204a8467913dfa12877cb9fe49de061fe506e67a7d8c8f8a49033d8e7dfecf39724b", 0xcd}, {&(0x7f00000007c0)="d1366dd2a087fcba637b4325d36bcd8f9f4c10d91f7eed51927fc18403d70c8b92e0be88627539ae60acff19fb0410a3abcd79aaf5984e9d83559c3caa34e609d55b6d5878d26aa7f36a8f1cb71323c09ad67a683645a2661aa2c3ce985c28b5deac4b647419957f20868a6b29a8b85940b83df4e2ae932114b88ab1cf136a2de14c8479111a075c07de7c1b5c5502d24a16ce079c8a7542eaeaa0", 0x9b}], 0x7) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r7, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r7, 0x10, 0x0, @in6={0xa, 0x4e23, 0x73, @local, 0x5fc}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) 01:07:43 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xff000000, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:43 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x5, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, &(0x7f0000000140)={{0x4, @name="57565148d096a4107ab19357fa411b7d45ff73c1d91adf29f694a458dcf63180"}, "06dfacea9b7bbee32a18b48265f9537650727a09a7a6feb7d98eb5237540ed93", 0x3}) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r4, 0x20, 0x0, 0xfffffeff000) fallocate(r4, 0x0, 0x0, 0x10000101) 01:07:43 executing program 2: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) dup2(r0, r0) 01:07:43 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xffffff8d, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1476.298434] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1476.326123] netlink: 'syz-executor.4': attribute type 7 has an invalid length. 01:07:43 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000140)={0x4, 0x8, 0xfa00, {r1, 0x434}}, 0x10) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0xffff]}, 0x8, 0x800) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r6) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x100812, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}, {@mmap}, {@cache_loose}, {@afid}, {@posixacl}, {@privport}, {@access_any}], [{@fowner_lt={'fowner<', r6}}, {@context={'context', 0x3d, 'system_u'}}]}}) [ 1476.349268] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:07:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x2000000}, 0x0) 01:07:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x27c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) [ 1476.831103] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:43 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xfffffff5, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1476.968943] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:44 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r1, 0x4, 0x1) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x593, @mcast2, 0x6}, {0xa, 0x4e22, 0x800, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0xffffffffffffffff, 0xffffffff}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in6={0xa, 0x4e24, 0xffffffff, @mcast1, 0x2}, @in={0x2, 0x40, @remote}}}, 0x118) 01:07:44 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r3 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r3, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x13f, 0xa}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r5, 0x7}}, 0x10) syz_init_net_socket$ax25(0x3, 0x2, 0xcb) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18) dup2(r0, r0) 01:07:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x3000000}, 0x0) [ 1477.321530] kauditd_printk_skb: 5 callbacks suppressed [ 1477.321597] audit: type=1804 audit(1634692064.191:2121): pid=8160 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/526/bus" dev="sda1" ino=15044 res=1 01:07:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x27e}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:07:44 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x2}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1477.555576] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:44 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r3 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r3, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00', 0x4}, {0xa, 0x4e24, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, r1, 0xfffffffe}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) [ 1477.596831] audit: type=1800 audit(1634692064.411:2122): pid=8170 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=15044 res=0 01:07:44 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="08010000", @ANYRES16=r1], 0x108}, 0x1, 0x0, 0x0, 0x20000014}, 0x40801) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="60d40000", @ANYRES16=r1, @ANYBLOB="000306000000fbdbdf25540000000c0099009fbd0000530000000a00060008021100000100000a00060008021100000000000a000600ffffffffffff00000a000600ffffffffffff00000a0006000802110000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x24008044}, 0x4014) lseek(r0, 0x1200, 0x0) r2 = getpgid(0x0) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0x5, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r5, 0x20, 0x0, 0xfffffeff000) fallocate(r5, 0x0, 0x0, 0x10000101) [ 1477.690893] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:44 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x200c0, 0x0) write$apparmor_current(r0, &(0x7f0000000040)=@profile={'permprofile ', '!\x00'}, 0xe) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mdstat\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000003c0)=[{0x20, 0x0, [0x6, 0x400, 0x2, 0xfffffffe, 0x0, 0x40, 0x2, 0x520, 0xfffff000, 0x7ff, 0x8001, 0x8001, 0x763, 0x1, 0x0, 0x4]}, {0x21, 0x0, [0x5, 0x3, 0x456, 0x6, 0x8b2a, 0x5, 0x1, 0x80000001, 0x8, 0x69a, 0x1f, 0x6, 0x80000000, 0x9, 0x5, 0xffffff0d]}, {0x2, 0x0, [0xad4, 0xffff, 0x80000000, 0xfff, 0x100, 0x8, 0x5, 0x7, 0x5, 0x80000000, 0x3ff, 0x4, 0x1, 0x2, 0xffff, 0x3]}, {0x28, 0x0, [0x1, 0x8, 0xfffffffa, 0x7, 0x8000, 0xfff, 0x1, 0x4, 0x8000, 0x7fff, 0x7, 0x6, 0x6, 0x200, 0x3, 0x3]}], 0xffffffffffffffff, 0x1, 0x1, 0x120}}, 0x20) read$FUSE(r1, &(0x7f0000004240)={0x2020}, 0x2020) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0), 0x2, 0x8}}, 0x20) lseek(r1, 0x4, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x41}}}, 0xfffffff9, 0x1, 0x2, 0x7c, 0xc, 0xfff, 0x3f}, 0x9c) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r2 = dup2(0xffffffffffffffff, r0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000500)={0x5, 0x1, 0x3, "900137042a928fb8306ef5d1ce67fe3255a67c8eca2a478cb68eaa908d625aa6", 0x20363059}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010101}}, 0x4, 0x6, 0x0, 0xffff, 0x10, 0x80000000, 0x81}, &(0x7f0000000140)=0x9c) bind$pptp(r2, &(0x7f0000000280)={0x18, 0x2, {0x3, @local}}, 0x1e) [ 1477.743781] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1477.769051] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:07:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x4000000}, 0x0) 01:07:44 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x4}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1477.872051] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1477.895949] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1477.945054] audit: type=1804 audit(1634692064.821:2123): pid=8245 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/527/bus" dev="sda1" ino=14708 res=1 01:07:46 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x7}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x5000000}, 0x0) 01:07:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x29e}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:07:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r2, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000400)={0x10, 0x30, 0xfa00, {&(0x7f0000000300), 0x2, {0xa, 0x4e21, 0xfffffffe, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, r3}}, 0x38) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x2}}, 0x20) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) creat(&(0x7f0000000440)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @ib={0x1b, 0x101, 0x6, {"9fe39aa7392deb7c6147fbb827d1fdd6"}, 0x7fffffff, 0xb70, 0x1}, @in6={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}}}, 0x118) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r1}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r8, 0x4, 0x1) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r7, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e22, 0x3ac7a833, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x200}}}, 0x118) [ 1482.357649] netlink: 'syz-executor.4': attribute type 7 has an invalid length. 01:07:49 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x8040, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140), 0x2, 0x5}}, 0x20) r3 = dup2(r0, r1) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r4, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x2, 0x3}}, 0x20) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000080)={0x3, @null, 0xee00}) getsockopt$ax25_int(r1, 0x101, 0x1ed687e9d71e2f55, &(0x7f0000000000), &(0x7f0000000240)=0x37036a64e32ad217) [ 1482.511775] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:07:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x6000000}, 0x0) 01:07:49 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x8}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1482.704198] audit: type=1804 audit(1634692069.581:2124): pid=8307 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir603776343/syzkaller.3welgm/1232/file0" dev="sda1" ino=14132 res=1 01:07:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) [ 1483.140719] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1483.288809] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1483.313239] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:07:50 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x9}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:50 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @ib={0x1b, 0x9, 0x200, {"175296a877a5d7f9920045799edec7f9"}, 0x7049, 0x3, 0x8}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in6={0xa, 0x4e22, 0x0, @loopback}}}, 0x118) 01:07:50 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r1, 0x101, 0x5, &(0x7f0000000040)=0x7b5, 0x4) r2 = dup2(r0, r1) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000000)={0x6, "6e146e6bdf0eb73aa14ace926c5eb5ab4f9243f2d23d0cc19afad34c9f1eae82", 0x2, 0x1}) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x80) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r5}}, 0x18) 01:07:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x7000000}, 0x0) [ 1483.782540] device bridge1039 entered promiscuous mode [ 1483.838340] device bridge1040 entered promiscuous mode [ 1483.864962] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:50 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0xe}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x305}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:07:50 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0xfffffffe, 0x10, 0x10, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010100}, @in={0x2, 0x0, @remote}}}, 0x1b8) [ 1484.050266] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:51 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r2 = dup2(r0, r1) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0xc0) r3 = openat(r2, &(0x7f0000000040)='./file0\x00', 0x30d080, 0x20) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r4, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r5, 0x4, 0x1) ioctl$sock_ax25_SIOCADDRT(r5, 0x890b, &(0x7f00000001c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @default]}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @in6={0xa, 0x4e22, 0x200, @loopback, 0x9f}}}, 0x90) 01:07:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x8000000}, 0x0) [ 1484.110287] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1484.143515] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1484.283874] device bridge1041 entered promiscuous mode [ 1484.293835] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:51 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x48}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:51 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x80, @remote, 0xc6e4}, {0xa, 0x4e22, 0x1, @empty, 0xfff}, r3, 0x7fff}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r1}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r7, 0x4, 0x1) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x20, @rand_addr=' \x01\x00', 0x1a}, {0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}, r1, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) 01:07:51 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x6, @remote, 0x8}, @in6={0xa, 0x4e21, 0x12, @mcast2}}}, 0x118) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f00000005c0)={0x3, &(0x7f0000000540)=[{0x1, 0xe9, &(0x7f00000003c0)="f188a85882dbbf00e4210365bd6522dad1d05e657d1e058eb279f2dd65531b8ca4010daaf9c3ba60d578ce5e26cbe262ef24255f1bb25b7010f643e7b2c02d4e47fc20b14689776d7787186161084df0494908342706aac18587c9b7e10e108f31f477aa3bbbc0a88e3813d02b1c5466966713729970d5a198d8828d2672d0f962b44c4bc2f117898f77703750601349601198747f7793f727a613b9bf7aea7450211c15316e8574a182c0c2f9e6c89218c40e7b8356775f545b4ecffc293fd2fe4be556791be2144e87daa97629e0a8622c7fa68d42525d696d71954bee5a57ba50ff3f2a00b99830", 0x1, 0x1}, {0x8, 0x1e, &(0x7f0000000340)="fd25d10e15969cf09d620cc840b76929b11832c4e9570a3d4ad3939c246f", 0x1}, {0x800, 0x7b, &(0x7f00000004c0)="f1f722a9d23f0356678f2fe4c0825b6cd7800392830c764ee47271a76bf4a0f71da43aae2abcb79ac8e0a13b7193828c05dfe0c585d2f80445f557c94355bef21e840e6992c11e3052ee07dbc7ad888efb8a9b52ddbe21b71893300758ed241e6db891e7add078b1372a88a5e0fd7f4f52a7642d05fae129e9e9ef", 0x0, 0x1}]}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000004240)={0x2020}, 0x2020) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x5, @mcast1, 0xa4f3}, r4}}, 0x30) lseek(r2, 0x4, 0x1) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) dup2(r0, r1) [ 1484.524472] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x33e}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:07:51 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x60}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x9000000}, 0x0) 01:07:51 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) [ 1484.957477] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1484.971960] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1484.988465] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de 01:07:52 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000004240)={0x2020}, 0x2020) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r3) ioctl$BTRFS_IOC_SPACE_INFO(r3, 0xc0109414, &(0x7f0000001b80)=ANY=[@ANYBLOB="cb000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b4dfb07660f61f7864bbacf3b911ac74c7ff554ac8daea43c72492cac57e76a66d27ffd0bc"]) lseek(r2, 0x4, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000007c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000340)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000800)={0x13, 0x10, 0xfa00, {&(0x7f00000005c0), r4}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x4e23, @rand_addr=0x64010101}}}, 0x118) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r7}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x401, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f00000001c0)={r8, 0xdb}) [ 1485.051928] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1485.079191] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de 01:07:52 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0xfc}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1485.149939] device bridge1042 entered promiscuous mode 01:07:52 executing program 2: ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000040)={&(0x7f0000000000)=""/34, 0x22}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) dup2(r0, r1) [ 1485.171695] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1485.197059] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1485.208184] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:07:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xa000000}, 0x0) [ 1485.260248] device bridge1042 left promiscuous mode [ 1485.294620] device bridge1042 entered promiscuous mode [ 1485.342438] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:52 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x700}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:52 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r2, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000740)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000440)=[{0x28, 0x0, [0x2, 0x58f4, 0xfff, 0x1000, 0x7ffffffe, 0x4, 0x20000000, 0x0, 0xfffffffc, 0x4, 0x6, 0x6, 0x6, 0x1, 0x2aa4, 0xfffffaa1]}, {0x0, 0x0, [0x7, 0xffff, 0x9, 0x5, 0x7, 0x8, 0x80000001, 0x7, 0x1b, 0x10000, 0x7fe, 0xfffffffe, 0x9, 0x3, 0xfffff908, 0x59a]}, {0xf, 0x0, [0x9f9, 0xfffffffe, 0x2, 0x5, 0x4, 0x1, 0xcf, 0x7, 0x80000, 0x1000, 0xbd8, 0x5e0, 0x5, 0x3, 0x740, 0x8]}, {0x6429e8b04d5c074a, 0x0, [0x1, 0x9, 0x8, 0x4, 0x3, 0x3, 0x72, 0x6, 0x800, 0x1, 0x180, 0x1e, 0xffff, 0x3ff, 0x3f, 0x6]}, {0x8, 0x0, [0x9, 0x5, 0x8000, 0x8, 0x4, 0x8, 0xffffffff, 0x7, 0x7ff, 0x9, 0x2, 0x8001, 0x8, 0x5960, 0x2, 0xff]}, {0x30, 0x0, [0x0, 0x200, 0xff, 0x0, 0x6f1, 0xfffffff8, 0xf34, 0x2, 0x7fffffff, 0x8, 0x1, 0x9, 0x6, 0xfffffffe, 0x400, 0xde14]}, {0x4, 0x0, [0x0, 0x81, 0x7, 0xcad, 0x3, 0x18000000, 0x401, 0x5, 0x3, 0x6c99, 0x4, 0x2, 0xd4, 0x9, 0x1, 0x80]}, {0x14, 0x0, [0xd426, 0x55, 0x2, 0x6, 0x6, 0xff, 0xdb, 0x3ff, 0xffff, 0x2, 0x7fff, 0xfffffff9, 0x8, 0x5, 0x400, 0x3]}, {0x0, 0x0, [0x6, 0x2985, 0x8, 0x20, 0x6, 0x3e5, 0x80000001, 0x630c, 0x3, 0x7, 0x2eb, 0x80000001, 0x8, 0x7fffffff, 0xe75, 0x5]}, {0x29, 0x0, [0x48000000, 0x7ff, 0x1ff, 0x7, 0x80000000, 0x3, 0xfff, 0x3, 0x1, 0x3, 0x1, 0x4, 0x3, 0x401, 0x40000000, 0x200]}], r5, 0x1, 0x1, 0x2d0}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x104, 0xfa08, {r6, 0x800, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @multicast2}}}, 0x118) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000240), r6, 0xfffff800}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000400)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r8}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r9, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) 01:07:52 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}, 0x48) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000001c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000180)}}, 0x18) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x141000, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x1, @remote, 0x400}, {0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40}, 0xffffffffffffffff, 0x3}}, 0x48) r3 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r3, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000240)={0x12, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, r0}}, 0x18) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f00000000c0)=@bpq0, 0x10) dup2(r0, r1) 01:07:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x366}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) [ 1485.541868] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.547540] ieee802154 phy1 wpan1: encryption failed: -22 01:07:52 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x900}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1485.727096] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1485.794260] device bridge1043 entered promiscuous mode [ 1485.840973] device bridge1043 left promiscuous mode 01:07:52 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) dup2(r0, r1) [ 1485.931165] device bridge1043 entered promiscuous mode 01:07:52 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0xe00}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xb000000}, 0x0) 01:07:52 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r2, 0x4, 0x1) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000240)={0x15, 0x170, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x42}}, @in6={0xa, 0x4e23, 0xff, @rand_addr=' \x01\x00', 0x81}}}, 0xfffffffffffffe69) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {&(0x7f00000003c0)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) 01:07:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x36f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) [ 1486.130504] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:53 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x224e}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:53 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f0000000140)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) r2 = dup2(r0, r1) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0xffff, 0x8000) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r5, 0x4, 0x1) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004240)={0x2020}, 0xfffffd9c) lseek(0xffffffffffffffff, 0x100000001, 0x4) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r8, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e22, @multicast2}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r8, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040)=0xe1, r4, 0x0, 0x0, 0x1}}, 0x20) 01:07:53 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x3f00}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1486.503521] device bridge1044 entered promiscuous mode 01:07:53 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r4, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfff}, r6, 0x1ff}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) 01:07:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xc000000}, 0x0) 01:07:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3aa}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:07:53 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000000)={0x0, 0xb, 0x4, 0x2000, 0x8, {0x77359400}, {0x2, 0x1, 0x1f, 0x4d, 0x0, 0x0, "14c1e93b"}, 0xffffffe0, 0x4, @fd=0xffffffffffffffff, 0x1, 0x0, r2}) fcntl$notify(r3, 0x402, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r5 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r5, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000240)={0x20, 0x2, 0x4, 0x1009, 0x80000000, {0x0, 0x2710}, {0x4, 0x1, 0x20, 0x40, 0x96, 0x0, "b0a97d46"}, 0x5, 0x2, @userptr=0x2, 0x9, 0x0, r5}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r6, 0x4, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000080)={0x0, r6, 0x7fff, 0x761, 0x8e, 0x2}) 01:07:53 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) ptrace$poke(0x5, 0x0, &(0x7f0000000140), 0x1) r2 = perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x5, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000040)={0x1f, 0x81, 0x93e, 0x2, 0x8000, 0x2}) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r4 = openat$incfs(r3, &(0x7f0000000240)='.log\x00', 0x50001, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x80082102, &(0x7f0000000200)={r5}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000002c0)={r5, 0x1, 0xffffffffffffffff, 0xfffffffe}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f00000001c0)={r5, 0x0, 0xffffffffffffffff, 0x4}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r6, 0x20, 0x0, 0xfffffeff000) fallocate(r6, 0x0, 0x0, 0x10000101) 01:07:53 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x4800}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:53 executing program 3: ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000002c0)={0x6, 0x6, 0x1, 0x1, 0x0, [0x8, 0x81, 0x0, 0x2]}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r4, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000280)={0x1e40000, 0x0, 0x0, r4, 0x0, &(0x7f0000000240)={0x98091f, 0x8001, '\x00', @value64=0x80}}) r5 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r5, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) [ 1486.979849] audit: type=1804 audit(1634692073.861:2125): pid=8624 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/528/bus" dev="sda1" ino=14353 res=1 [ 1487.027028] device bridge1045 entered promiscuous mode 01:07:54 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x4e22}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xe000000}, 0x0) 01:07:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3bc}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) [ 1487.211762] audit: type=1804 audit(1634692073.962:2126): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/528/bus" dev="sda1" ino=14353 res=1 01:07:54 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x8, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) 01:07:54 executing program 2: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r0, 0x4, 0x1) r1 = open(&(0x7f0000000340)='./file0\x00', 0x400, 0x139) openat$cgroup_ro(r1, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x109) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000000)) openat$cgroup_ro(r2, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x600, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r4, 0x7fffffff}}, 0x10) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x158) openat$cgroup_ro(r5, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000080), 0x8) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup2(r1, r2) 01:07:54 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x6000}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1487.459553] validate_nla: 8 callbacks suppressed [ 1487.459563] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1487.555638] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:07:54 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x105001, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000280)=0x16) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) [ 1487.666914] device bridge1046 entered promiscuous mode [ 1487.728462] audit: type=1804 audit(1634692074.612:2127): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/528/bus" dev="sda1" ino=14353 res=1 [ 1487.744097] netlink: 'syz-executor.4': attribute type 7 has an invalid length. 01:07:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xf000000}, 0x0) [ 1487.833451] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1487.843823] device bridge1046 left promiscuous mode 01:07:54 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x80fe}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1487.873845] device bridge1046 entered promiscuous mode [ 1487.921600] audit: type=1804 audit(1634692074.802:2128): pid=8683 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/528/bus" dev="sda1" ino=14353 res=1 01:07:54 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000000)={0x3, @default}) r2 = dup2(r0, r1) copy_file_range(r1, &(0x7f0000000040)=0x3f, r0, &(0x7f0000000080)=0xffffffff00000000, 0x4, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x29, 0xfe, 0x9, 0x4, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x8000, 0x40, 0x1f, 0x9}}) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="6800000024008b0d00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000280008801c000100000000000000000000000000000000000000000001000000060002000000000008000e00ff00000008000d000600000009000100636c736163740000"], 0x68}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x29, 0xa4, 0x5, 0x6, 0x2a, @remote, @remote, 0x8000, 0x8, 0x3f, 0x8}}) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="6800000024008b0d2000"/20, @ANYRES32=r9, @ANYBLOB="00000000ffffffff00000000280008801c000100000000000000000000000000000000000000000001000000060002000000000008000e00ff00000008000d00060000000b000100636c736163740000"], 0x68}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x6b, 0x4, 0x40, @dev={0xfe, 0x80, '\x00', 0x35}, @mcast1, 0x7800, 0x8f7f9862ba3be8d1, 0x3, 0xdd2d}}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="48010000", @ANYRES16, @ANYBLOB="000127bd7000fcdbdf250f00000014000180080003000300000008000100", @ANYRES32, @ANYBLOB="680001e73d1ed5b1054deca58008000100", @ANYRES32=r3, @ANYBLOB="14000200766c616e3100000000000000000000000800030002000000140002006970366772653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="14000200766972745f776966693000000000000008000100", @ANYRES32, @ANYBLOB="300001801400020076657468315f76360265c99cbda68f03b024a003409a536c616e0000", @ANYRES32, @ANYBLOB="08000300020000004c0001801400020076657468315f766c616e00000000000008000100", @ANYRES32=r7, @ANYBLOB="080003008407c53d140002006970766c616e3000000000000000000008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="1cd89d82fb4cbb38", @ANYRES32=r11, @ANYBLOB="0800030003000000080003000300000020000180140002006272696467655f736c6176655f3000000800030002000000"], 0x148}, 0x1, 0x0, 0x0, 0x30000000}, 0x40) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @private2, 0x5775, 0x3, 0x1, 0x400, 0x7ff, 0x80830000, r5}) 01:07:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3be}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) [ 1488.163958] nla_parse: 6 callbacks suppressed [ 1488.163968] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1488.193186] audit: type=1804 audit(1634692074.802:2129): pid=8624 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/528/bus" dev="sda1" ino=14353 res=1 01:07:55 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0xc0fe}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:55 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r2, 0x4, 0x1) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r1}}, 0x18) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) [ 1488.274232] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1488.320751] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1488.438698] device bridge1047 entered promiscuous mode 01:07:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x10000000}, 0x0) [ 1488.491298] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1488.514751] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1488.576286] device bridge1047 left promiscuous mode 01:07:55 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0xfc00}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:55 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000300)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @rand_addr=0x64010102}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r3, 0x7}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r6}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r7, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in6={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00'}}}, 0x118) [ 1488.640823] device bridge1047 entered promiscuous mode [ 1488.675629] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3c0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:07:55 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) dup2(r0, r1) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r2, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) ioctl$sock_proto_private(r2, 0x89e3, &(0x7f0000000000)="9f79344acd889258fd071b2d4974d8677aaef984") 01:07:55 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0xfe80}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1488.930841] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1489.032357] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:07:56 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r2, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000340)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000600)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r3}}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000280), r1}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r7 = syz_open_dev$audion(&(0x7f0000000140), 0x9, 0x200000) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000640)={0xffffffffffffffff}, 0x2c, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000006c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x1000, @mcast1, 0x40}, {0xa, 0x4e22, 0x401, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, r8, 0x6}}, 0x48) [ 1489.123515] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1489.176044] device bridge1048 entered promiscuous mode 01:07:56 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0xfec0}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:56 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f00000000c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000000), r2, 0x8}}, 0x18) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) dup2(r0, r3) [ 1489.235040] device bridge1048 left promiscuous mode 01:07:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x60000000}, 0x0) [ 1489.296016] device bridge1048 entered promiscuous mode 01:07:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3c2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:07:56 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0xff00}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1489.474450] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:56 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000140)=0x1, r4, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) 01:07:56 executing program 2: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r1, 0x4, 0x1) dup2(r0, 0xffffffffffffffff) 01:07:56 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x40000}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1489.859336] device bridge1049 entered promiscuous mode 01:07:56 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2}}, 0x20) [ 1489.923639] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:56 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x1000000}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x65580000}, 0x0) 01:07:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3d2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:07:57 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000240)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in6={0xa, 0x4e21, 0x80, @mcast1, 0x4}, @in={0x2, 0x0, @private=0xa010101}}}, 0x118) 01:07:57 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x2000000}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1490.345605] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1490.424399] device bridge1050 entered promiscuous mode [ 1490.462302] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1490.513025] device bridge1050 left promiscuous mode 01:07:57 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x4000000}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1490.579329] device bridge1050 entered promiscuous mode 01:07:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x80230000}, 0x0) 01:07:57 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r2, 0x4, 0x1) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000240)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000b80)=ANY=[@ANYBLOB="7f454c460609d102000000000000000000000300663d000027030000000000004000000000f4ec31320000000e00000000000000c80000000100380002000900fffdc0ff0400000003000000050000000000000006000000000000000104000000000000090000000000000003000000000000001e15ffffffffffff193fc1e732092e4730ed6204837786408136fd1cc3fd462ba2b217c690a4b4183622996d2e8935c1fc7e0bed06c187364b84b530d373c1e4714f802158dded4c9105bb832b4875c0fbacce286c97caea5585c07411d93199a2d7f5d5727be715f80ebf1d6d42d0d8e9a27f8a55a17b791b1395ee1a17e2e7a8fbbac5bdc4ee46bc3dd678b6000fbcd9fe2ce0f7f6809aba63ac7be9255b62ab3a30e9c1025cfae079b59a70cd61c05bb46f37338dcece1dc2494d5f33258a7c5db27e219400000000000000034923c5fda06b8a050410d40e612c5a7b912aa4120a49d6f57f947201f6e77893b8acb6300349f7efaa407bd0dedf6b622948a8059bb0da593fa94c9df098dea0bb294380a2af960ed7296c42af0bc271aeb98ee9fe84707bad55bff9dfe0d8ea6eed15087861f2f7f31ff5e5611e06607cc913cdf2b3627bd4f661a0f7498152c2709e33047467bd575e5474752236d611ff5f47d9c729e9cbd08a52762cf38909465ffbce03da4b199c79094288e93ee672b7c2fdce43f6a949d2368f0061a6b068124bad9e900c281256ea6bf58a763d5c86214c45c0a05ae6bc84dc4abf280144558ec3263ff99b66d612743c15782d5900"/1060], 0x420) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in6={0xa, 0x4e21, 0x4, @private2, 0xe192}, @in6={0xa, 0x4e21, 0xffffffc0, @rand_addr=' \x01\x00', 0x5}}}, 0x118) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r5, 0x4, 0x1) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@ipv4_getroute={0x1c, 0x1a, 0x2f5b0fe2a5bfea35, 0x70bd25, 0x25dfdbff, {0x2, 0x20, 0x14, 0x1, 0xfd, 0x4, 0xff, 0x6}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0xc010) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) close(r0) r6 = open(&(0x7f0000000340)='./file0\x00', 0x202080, 0x128) r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r6, &(0x7f0000000140), &(0x7f00000001c0)={'U-', 0x5}, 0x16, 0x1) ioctl$F2FS_IOC_GET_FEATURES(r7, 0x8004f50c, &(0x7f00000002c0)) 01:07:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3d6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) [ 1490.750287] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:57 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x7000000}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:57 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000000)) r2 = dup2(r0, r1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000004240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) setreuid(0x0, 0x0) r7 = getgid() getgroups(0x4, &(0x7f00000000c0)=[0xffffffffffffffff, r7, 0x0, r7]) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000002600)={0x0, 0x0}, &(0x7f0000000280)) setreuid(0x0, r9) r10 = getgid() getgroups(0x4, &(0x7f00000000c0)=[0xffffffffffffffff, r10, 0x0, r10]) r11 = getgid() getgroups(0x4, &(0x7f00000000c0)=[0xffffffffffffffff, r11, 0x0, r11]) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002fc0)={0x0, 0x0, 0x0}, &(0x7f0000003000)=0xc) syz_fuse_handle_req(r2, &(0x7f00000003c0)="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", 0x2000, &(0x7f0000003140)={&(0x7f00000000c0)={0x50, 0x0, 0x7, {0x7, 0x22, 0x100, 0x80000, 0x1000, 0x8, 0x1f, 0xffffffff}}, &(0x7f0000000140)={0x18, 0x24, 0x81, {0x72a}}, &(0x7f0000000180)={0x18, 0x0, 0x5, {0x4}}, &(0x7f00000001c0)={0x18, 0x0, 0x2, {0x1ff}}, &(0x7f0000000200)={0x18, 0x0, 0xfffffffffffff727, {0x40}}, &(0x7f0000000240)={0x28, 0xfffffffffffffff5, 0x1, {{0x81, 0x9, 0x0, r6}}}, &(0x7f0000000280)={0x60, 0xffffffffffffffda, 0x6, {{0x9, 0x9, 0x320, 0xd85, 0x8001, 0x800, 0x69, 0x101}}}, &(0x7f0000000300)={0x18, 0x0, 0xc67, {0x10000}}, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000007f000000000000000000"], &(0x7f00000023c0)={0x20, 0x0, 0x1fffe00000000000, {0x0, 0x1}}, &(0x7f0000002400)={0x78, 0x4a, 0x9d2, {0x9, 0x8, 0x0, {0x3, 0x5, 0xfffffffffffff76a, 0xfff, 0x5, 0x7, 0x5, 0x8, 0xf0000000, 0xc000, 0x6, 0xffffffffffffffff, r5, 0x3, 0x1}}}, &(0x7f0000002480)={0x90, 0xfffffffffffffffe, 0x48, {0x1, 0x3, 0x7, 0xa00, 0x9, 0x7, {0x6, 0xffffffffffffffff, 0x1, 0x40, 0x2, 0x517, 0x1, 0x0, 0x1f0e, 0x2000, 0x9, r4, 0xee00, 0x0, 0xff}}}, &(0x7f0000002540)=ANY=[@ANYBLOB="69000000f5ffffff00010000000000000000000000000000510000000000000018000000b1cf00002f6465762f1a5e76bc6e6962616e642f72646d615f636d00000080000000000000000000000000000e000000000000002f70726f632c637075696e666f000000"], &(0x7f0000002a80)={0x520, 0xfffffffffffffffe, 0x9, [{{0x0, 0x2, 0x0, 0x0, 0x4966, 0x3, {0x3, 0x3ff, 0x1fe9f10f, 0x3, 0x6, 0x1f, 0xb1f4, 0x1, 0x800, 0x2000, 0x1, 0x0, r5, 0x1, 0x2}}, {0x4, 0x10001, 0xe, 0x1000, '/proc/cpuinfo\x00'}}, {{0x4, 0x3, 0x8, 0x1c1e, 0x7fff, 0x2, {0x0, 0x1, 0x8, 0xffffffff, 0x3f, 0x2, 0x6, 0x5, 0x7, 0x1000, 0x40, 0x0, 0x0, 0x0, 0x800}}, {0x4, 0x3, 0x0, 0x8000}}, {{0x5, 0x2, 0x1, 0x0, 0x101, 0x1, {0x2, 0x1, 0x3, 0x4, 0x9, 0x1ff, 0x2f6e, 0x200, 0x3f, 0x8000, 0x1ff, r4, 0x0, 0xfffffff9, 0x34d471b7}}, {0x2, 0x17, 0x18, 0x1, '/dev/infiniband/rdma_cm\x00'}}, {{0x1, 0x1, 0x8, 0x8c, 0x1, 0x6, {0x6, 0x4, 0xcad, 0x8, 0x2c, 0x80000001, 0xfffffdd0, 0xffffff01, 0x80000001, 0x1000, 0x6, 0x0, r5, 0xf26, 0x9}}, {0x6, 0x3, 0xe, 0x2, '/proc/cpuinfo\x00'}}, {{0x4, 0x3, 0x4, 0x7, 0x3ad2e45d, 0x0, {0x4, 0x3, 0x400, 0x8, 0x800, 0x4, 0x649bbade, 0x5, 0x80000000, 0xc000, 0x1ff, r4, r7, 0x6, 0x7}}, {0x4, 0x1f, 0x0, 0x200}}, {{0x5, 0x1, 0x6, 0x91, 0x4d5f, 0x80000001, {0x6, 0x4, 0x23a, 0x20000000, 0xffff, 0x77, 0x1, 0x2, 0x9, 0x4000, 0x3ff, r9, r10, 0x0, 0x1}}, {0x5, 0xff, 0x1, 0x20, ','}}, {{0x3, 0x1, 0x0, 0x6, 0x3f, 0x4, {0x0, 0x0, 0x8, 0x0, 0x5, 0xa, 0x3, 0x4, 0x8000, 0xa000, 0x7ff, 0xffffffffffffffff, r5, 0x1, 0x4}}, {0x0, 0x9, 0x9, 0x140000, '+{-&:K()\xe0'}}, {{0x0, 0x0, 0x7, 0x2, 0x6, 0x7c, {0x3, 0x1, 0x0, 0x7, 0xffffffffffffffff, 0x6, 0x8, 0x800, 0x648a, 0xa000, 0x6, 0x0, r11, 0x2000000, 0x1000}}, {0x1, 0x1000, 0x0, 0x7}}]}, &(0x7f0000003040)={0xa0, 0xfffffffffffffffe, 0xd2, {{0x6, 0xffffffffffffffff, 0x7, 0x3, 0x1, 0x10000, {0x6, 0x8, 0xfc, 0x1, 0x4, 0x8, 0xa2e, 0x200, 0x4, 0x4000, 0x6, r4, r12, 0x7f, 0xffffffff}}}}, &(0x7f0000003100)={0x20, 0x0, 0x5, {0x809213, 0x0, 0x3, 0x5}}}) lseek(r3, 0x4, 0x1) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 01:07:57 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) [ 1491.036665] device bridge1051 entered promiscuous mode [ 1491.067426] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x81000000}, 0x0) 01:07:58 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x8000000}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3ea}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:07:58 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xf0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x96, 0x9, &(0x7f0000000680)=[{&(0x7f0000000080)="765c6db54a907340fad721d78f636a9ffdeeabd440d0bf65f33a2f103bec47b98808f49f29af0b9fd9821f10cf4b050713267ff102175ff0", 0x38, 0x3}, {&(0x7f00000000c0)="ab0bdba466a3eba692f3930d4325e332ea34bc39a4dd9a1b8f953fcc924fdeffbd9ec89f4d88c403e9ee579c7c07ff22643f41492ee969a9145af99cf2bdf6cabe0216", 0x43, 0x9}, {&(0x7f0000000140)="171162bb8250864f2eaa4e67e0e16a3fcec35338bc65d84b58278044120929d452a28833824f3e412840665c24a630cdf10836a46dd30bdf3437407c079fc55a746318fb5cf27b9766effba7294c47675667fe5461d20ed6524f9f86ec0d2e2e136b74e74a117ab31f7cd6ba53bf23f6d5827c03e6cc92f3015a1c46081c28e0de0d93ba5dd2b56cb6ba12718e7762113597c11ee1877263be52030b87adcb6e96835913dfed4777626c9cb01a152923bf69f826c78c12cabea0e7748203bf4b8fc6e3", 0xc3, 0x80}, {&(0x7f0000000240)="882d2e0f27bdb05a5cf6d7e2bc07523b9bd072677d78fbf264081444d69e01f8ce9f0c74f7b7e1cc892904c3b6332b24f0806f948bf4f2f6a020f9c87745e7d16b039677cb55c0375c4aea880e59a81e4190f404e349f697d8824c2b222a9d2997a9d508f957a1126bdede5af67a0ebe734fe8d130b341a966f2ba6407b9db10ab27f03cb66ae66a7947aeb90d69e5d75693318bdba0fb689a421f730b14017eb9923508eefa4d40b7d6fd5ec1cc9d11c3e1ee71a0072cc9c9d35513ab5094698f2b8823504f5d81379238957d1d83b9fe4ab999810284e3ddf2eb9e3e7fb3678e56c425bb5ba17609517236", 0xec, 0xffffffffffffffff}, {&(0x7f0000000340)="22ebb0118c231c693050a8af245d9bc65623f4e87c044b19d930541260c8270531fe4d14c5fcf4c58e914722fb01c4ac978eb4e73a1e901c3975", 0x3a, 0x2}, {&(0x7f00000003c0)="07872dd2913d2a43a7364383e04695e0240d9d3a4b2cd56cdde9d378fdf629840e7ba36a467fa7c1b237423ad02534d07598d496952015cb6fb3612c81972da5755ea135d01d1fa42464776887aae26d2270387424f5d199bf1f4c96f7eb074e182568baff97dd645bd1c5b8c0d2ff4f2fd8b8ce738d779b8c581388e26688aa772ecf8ff517269f2728c1b7f3aedf79d6ac99", 0x93, 0x1}, {&(0x7f0000000480)="9c095585fc87694ab973b3299f8579c4ac0646b110008057e5b5ebc93deedd059f75bd85d8903042eb87840591b3eea1cc73b0e597bd9eee96de1f171dc44c96b0cc4c3d7ad3eade51bb327001d3eba1e389c2da5d9df21c2e9b375fb218919dcfd0c66f5a30f1a193d58195f389d526e3c62d9138f78b2e4eb9e45bfbca2b1cb947422bd55bc40cd972f7b7a7dfefca7101a60d1ee73569d89a41283cae14eed212ac38a3accb68fddcaadaf7b3cd67810139f58fe48741e8ca3994d453d04954f8d71c36d7601911586ded6c", 0xcd, 0x5}, {&(0x7f0000000580), 0x0, 0x2}, {&(0x7f00000005c0)="88a5360c7a1255adc5b64845c6b13a1b9eb0a238b5f0bc5deb5fdf4c8999ae6e500da1ade69b11a0c4de93bb80128c5738ba4327fc79c4f9913c666dd4c400226d37086a501a4037d18db1fce9f127d55fd552ef5cbf31aac573d2de71f9c185e3c75e500064ae6122859ee968b7693333c26e59b626db546f8ec9306b16e3f3c7ee1f57a59f2d435c5b5f21d6fa2187d59e31cbf92b2694eb2bb5d167abe547b8adda0289", 0xa5, 0x9}], 0x1a400c1, &(0x7f0000000780)={[{@shortname_mixed}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@utf8no}, {@numtail}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@subj_role={'subj_role', 0x3d, ',#\\'}}, {@euid_lt={'euid<', 0xee00}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) dup2(r0, r1) [ 1491.337377] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:07:58 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r4 = open(&(0x7f0000000140)='./file0\x00', 0x204a82, 0x2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r5, 0x4, 0x1) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000240)={0x12, 0x10, 0xfa00, {&(0x7f00000001c0), r1, r5}}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) 01:07:58 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x9000000}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:58 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) dup2(r0, r1) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000000)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xe}}, 0x10) [ 1491.775643] device bridge1052 entered promiscuous mode 01:07:58 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0xe000000}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1491.890113] device bridge1052 left promiscuous mode 01:07:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x88a8ffff}, 0x0) [ 1491.932554] device bridge1052 entered promiscuous mode 01:07:58 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x4e20, @empty}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x119) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='freezer.parent_freezing\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000003c0), 0x106, 0xcdcf531bcc210421}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0), 0x106, 0x6}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) r7 = syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0x20801) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r9, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_NOTIFY(r7, &(0x7f0000000480)={0xf, 0x8, 0xfa00, {r9, 0xb}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r6}}, 0x18) 01:07:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3ec}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:07:59 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x224e0000}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:59 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r2 = dup2(r0, r1) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/rt_acct\x00') r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xc8, r4, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x3}, @NL80211_ATTR_IE={0xaa, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x0, 0x40, 0x5}}, @random={0x4, 0x6b, "f5c07b6150f7f714eadfca0d934c68e304abe5df545cdcb6068ce6eac5c47c366b6ee9ab6d7b5bf8bcee2fead96b9b7ccffc65b61f2552123e7bd98af412d8e223a88d545ddc6cd8a168bb4ebfe57d79178bed148649313963e56534401f486bc607af433089c2d3f48824"}, @mic={0x8c, 0x10, {0xd09, "c5ba6df8d404", @short="5b0f6113c8c067be"}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x0, @device_b, 0x8, "", 0x6, 0xfff, @device_b, 0x2}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000040}, 0x20040000) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r3) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r6, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x6b}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xf8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x30}}, 0x8000) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r7, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @remote, 0x9}, {0xa, 0x4e21, 0x0, @private1, 0x42e5}, r7, 0x5}}, 0x48) [ 1492.398164] device bridge1053 entered promiscuous mode 01:07:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x9effffff}, 0x0) 01:07:59 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) dup2(r0, r1) 01:07:59 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x3f000000}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1492.532456] validate_nla: 16 callbacks suppressed [ 1492.532466] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1492.588063] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:07:59 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @ib={0x1b, 0x316e, 0x5, {"af6502c390769c50ff9558cb1b92989c"}, 0x5, 0x200, 0x9}, @in={0x2, 0x0, @remote}}}, 0x118) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = getgid() getgroups(0x4, &(0x7f00000000c0)=[0xffffffffffffffff, r5, 0x0, r5]) socket$nl_route(0x10, 0x3, 0x0) socket(0x27, 0x2, 0xf1) r8 = getgid() getgroups(0x4, &(0x7f00000000c0)=[0xffffffffffffffff, r8, 0x0, r8]) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getgid() epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000300)={0x60000016}) getgroups(0x4, &(0x7f00000000c0)=[0xffffffffffffffff, r10, 0x0, r10]) getgroups(0x5, &(0x7f0000000480)=[r8, r9, r7, r10, r6]) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x40a, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e733d6664060000006e6f3d", @ANYRESHEX, @ANYBLOB="c3ef24d9e0f69e", @ANYRESHEX=r4, @ANYBLOB=',cachetag=/dev/infiniband/rdma_cm\x00,access=user,posi\x00acl,dfltgid=', @ANYRESHEX=r5, @ANYRESDEC]) sendmsg$nl_route_sched(r4, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=@newchain={0x84, 0x64, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x7, 0x8}, {0x9, 0x1}, {0x4, 0x6}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x1, 0x6}}, @filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x59}, @TCA_U32_POLICE={0x14, 0x6, [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}]}, @TCA_U32_HASH={0x8, 0x2, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x71}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x4, 0x81}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040000}, 0x40058) [ 1492.642126] device bridge1053 left promiscuous mode [ 1492.695874] device bridge1053 entered promiscuous mode 01:07:59 executing program 2: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) 01:07:59 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x48000000}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:07:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3f0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:07:59 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x58) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x80, @local, 0xfffffff8}, {0xa, 0x4e20, 0x3, @private0, 0x100}, r4}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f00000003c0)={0x1, 0x7, @status={[0xaf5, 0xd0ab, 0x9e, 0x5754, 0xffffffff, 0x6]}, [0x8001, 0x0, 0xff, 0x4, 0x2, 0x3, 0x2000000000000000, 0x2, 0x7, 0x1, 0x3, 0x400, 0x0, 0x1ff, 0x1c27644c, 0x8001, 0x50, 0x17, 0x1, 0x5, 0x0, 0x7, 0xffff, 0x8, 0x3, 0x6, 0x5, 0x100000001, 0xfff, 0xad, 0x9, 0xf0, 0x35, 0x2059, 0x4, 0x4, 0xffffffff, 0x6, 0x2f10c0000000, 0x6dc4, 0x24e1, 0x7, 0xea, 0xf5, 0xfc0, 0x3, 0x200, 0xeb, 0x0, 0x7ff, 0x3, 0x7, 0x3, 0x8001, 0x7, 0x2, 0x2, 0xffffffff, 0x2, 0x5, 0x3f, 0x9, 0x3ff, 0x8]}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) [ 1492.999715] netlink: 'syz-executor.4': attribute type 7 has an invalid length. 01:07:59 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x60000000}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:08:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xad27b6c2}, 0x0) [ 1493.095249] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:08:00 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) dup2(0xffffffffffffffff, r0) 01:08:00 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r2, 0x4, 0x1) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/container', 0x40000, 0xae) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r7, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r7}}, 0x18) [ 1493.242364] device bridge1054 entered promiscuous mode [ 1493.287226] nla_parse: 5 callbacks suppressed [ 1493.287236] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:08:00 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x8dffffff}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:08:00 executing program 2: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000080)=0x8, 0x4) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r2, 0x4, 0x1) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000000)={0x80, 0x8, 0x1, 0xffff, 0x1, [{0x401, 0x3f, 0xdd0f, '\x00', 0x8a}]}) r3 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r3, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) openat$cgroup_devices(r3, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) [ 1493.510790] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1493.524975] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:08:00 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) preadv(r0, &(0x7f00000014c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/193, 0xc1}], 0x2, 0x141, 0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001540)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000001500)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000001580)={0x9, 0x108, 0xfa00, {r6, 0x1, 'IJe', "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"}}, 0x110) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r7, 0x4, 0x1) r8 = accept4(r7, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f0000000300)=0x80, 0x80000) ioctl$EXT4_IOC_GETSTATE(r8, 0x40046629, &(0x7f0000000340)) fcntl$dupfd(r4, 0x406, r7) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r9 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x20, 0x8000}, &(0x7f0000000240)=0x8) [ 1493.566580] device bridge1054 left promiscuous mode 01:08:00 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0xf5ffffff}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1493.645998] device bridge1054 entered promiscuous mode [ 1493.687321] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:08:00 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r2 = dup2(r0, r1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f0000000300)={@local, 0x6a}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000001380)={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x2400200}) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000440)={@mcast1, @mcast1, @mcast2}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r4, 0x4, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001400)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000000c0)=ANY=[@ANYRES64=r5, @ANYBLOB="2447bbb15ba50379dffaa29a8469d1851942f18a918bf2b9a45241395ffe7d97eeedf83f06177958257cd3cef5a5c123a87b3eca421d5e731566b46105846653bae3a26922b4e30a16fc3459368079f1987f9b1c16604a1a2678d97b82ba565f0e7fe03a73744a011bc50ff33f67bf0e12"]) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000002c0)={r5}) getpeername$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000000)=ANY=[@ANYRES64=r5, @ANYBLOB="090000000000000000100000000000004000000000000000f8ffffffffffffff7bb20000000000000000000000000000ff000000010000002a000000070000000800000000000000380f005a4b828cf1b882770decebca20bd02000000000001000000000000000700000000000000100000000000000000"]) 01:08:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3f8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:08:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xc2b627ad}, 0x0) 01:08:00 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0xfc000000}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1493.943572] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:08:00 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0xfe800000}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1494.103088] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1494.118812] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:08:01 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0xfec00000}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1494.198193] device bridge1055 entered promiscuous mode [ 1494.227684] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:08:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xe8030000}, 0x0) [ 1494.255629] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1494.263519] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1494.295614] device bridge1055 left promiscuous mode [ 1494.335660] device bridge1055 entered promiscuous mode 01:08:01 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0xff000000}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:08:01 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x80, r1, 0x0, 0x0, 0x1}}, 0x20) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) dup2(r0, r2) 01:08:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3fa}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) [ 1494.443679] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1494.659042] device bridge1056 entered promiscuous mode 01:08:01 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r4, 0x4, 0x1) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)={0x2, 0xffffffffffffffff, 0x1}) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000240)={{r5}, 0x2, &(0x7f00000001c0)=[0x4, 0xd531], 0x4, 0x6, [0xb22b, 0x1, 0x3, 0x7ff]}) r6 = open(&(0x7f00000002c0)='./file0\x00', 0x2041, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r8, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r8}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) [ 1494.704162] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:08:01 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0xffffff8d}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:08:01 executing program 2: fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000400), 0x2, 0x2) writev(r1, &(0x7f0000000ac0)=[{&(0x7f0000000440)="802854e1c3d45684bd799c7c002601a4551bb17094b338dab0f718794f27a15b3808e8c021209db21dcb3e3c324a8896990d34d51484be6c431fe1ffbb03a225f84748aeec04aa7dbcb9b95b6261b6fcfb26f2302bc206545dec51b0d19d5d4eb0ade8", 0x63}, {&(0x7f00000004c0)="6977f02474d9edd9c8630c731f0af4954af70151ea88757aa99f631b9f14cf501283bb76c67a17a9262325847cc4ce8bc0097bac8ea7367c6b17c6af412ffdca6a19a7f2dfaf2239a36ab703", 0x4c}, {&(0x7f0000000540)="d0721fccaa1cda4a6b8b4eb38a5193839fc87e38a8975eef5da9ee75b5fb0fcbc1d6f5a3c2580e85d4a507aac7f9655f13b3d1a052f232daba13b2d902cb2a5e7b9d80a110941cd5b12b06fa5e215d450d532d6fc3ddf20d01b256b61eaac7734ffe1c6ffd15023b8ea8a669f51d6525f97d21d0ef26f986f08233d9b502b1c225dca025a1fbd5c9396b35388bd0ee5891f24d3b3411826e0264e79fe532d56068a9c3e532e004732d936470f111a24b495ea11841459eba7b5d44d4b0c71de3c950731685e1923dbbcd2880043e8a901fd497e10a86cb16bdfa857023ac068d03f2dac7229591c3b9e248fa56149e923d48f9", 0xf3}, {&(0x7f0000000640)="a5061808709674eaf6df", 0xa}, {&(0x7f0000000680)="4f3232ccafcad617089be34898c8e9e4a13d24377fd4edc0e1c67d6fa4582b48cb5a429b662accec3221398cb0b4f86d0f0e304a6ec86fd6705d881c40e994e2e8613f7b1354413a27b56768346a032fe57421ec1d15377ba9796bf75cc029b6c6fb9ae5e1147acd2119e07798d4a9a78a9f463589a9a38e7f256c5a847efe94f57dd4e999af4ff43fc4ffd4fc8ba7a63182e8b3a47db025d7fab484ae4ae6d0b884f22949fb65e50ff4c6f6aab7ec663c81aee02b75d1e87f2262a55583240e99", 0xc1}, {&(0x7f0000000780)="c55bd6954cbc71e93d817c6d3e54c114ddc5526636b5da520e4e8c17b7c30a41ceb9e2f2ccb8d2980b3781af93817ef8f37ab5de6fec8740619891a6e53fb0db426367b91d7e2db44249df28e5c30c20a6782de28b28a5d7dee3c0ea358bc69ab1297351db80da4dbfb7dce6be91d559448d4df171aee6071870bd741a9eb667c6dadf3686b28c86e6ab023cd5c81062b4b7bff8", 0x94}, {&(0x7f0000000840)="5a38a68acfd9024f6b58a964eb06fb0cef97253f615e5d5989438a02ef821c29ab386ec94d6ae2aecc092fb04e55788bcc6d374f9fe7e7b0afa4ac6129f60aef5d509a0c49b6c59fbe64d083ab84f957f991027856939576ff2bfb521b04babb3945a9d35b635284ea6fd31c3bde9d87879ed3a5f5fec02a4185478fb04b4e6d330e1a22a10f3a298a4d48fb8af106a332e3009cc74bc845784433", 0x9b}, {&(0x7f0000000900)="ff8e3300b4fa66e17486f12686de26d0808fd389bf3aa9e72add6b56a0a73b69e59b117e92bcf5adc75649dc73a0aee7c9b236f7b37ba1f5bc57dd57abaee37488876850b292a4095423991327d64748854d78446069ab742443bc7fce4a75ab70a96cee1f6d516e0895c02c8bcfc79321ae3423228a2b0dfe39cf40466946b1836ab148c26d0abca1f9c0b30f773411bca8d95f30dcd95b9a2d1c94790621abde95cbb5021a38002663c403e5e789de5e7324c853c9f1bed8b2bcd39c4b2d25f0f0b3babab83e522d7a5813a5c97335e431530eee505d", 0xd7}, {&(0x7f0000000a00)="0e9313619b604bf70c059d689a73d2aac3f0d53bcf744a236abfb6c15424f8edce08fe6ed384a58a527dcad0554b3ef18e74a919b0769df538eaed1a37e89055b167f86e5e483225e457aecdd4daa3bfa3c72d35f4f8dbced993fa00fb496edb340f2edad763c11bc08583ca3264fffe25963a9e7b9c472092a0d1622526874d1613c9064534d0", 0x87}], 0x9) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000003c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000300), r4, r5}}, 0x18) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x422000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f00000000c0)={0x6, 0x118, 0xfa00, {{0x9, 0x2, "d2c395115e38fd6daf243ccb794f32299fcced7c123a1aa8afb433214dc3a04d879b353d2d0c1c602df65e8cd696ca534b4488fd76cfa5eb13e07fe6d0dabeb9bf0ffe103561e8a5b6446b72da75c1cf5ee2358927da318cad7c155e514e98ce7a53c3fe77ce2c481b9edf3bbac8fc5cb9e3128b3f0c8a257cef77ae65885fcb07bc7300c7d5cdadc292e16f302fd2b14c54ee2a5e2ebb87a1730f35071095383002725c88ad1fac3892ef809ac44a2a3e4d142d85386c602d2169febbd9047600a614bdf909440a642ab1d28a0dafbd1d502e6f9f43b4dfdaed7ccf7725d9b771b4e5833787e80f83564bbf9a0dfeb2859200", 0x1, 0x3f, 0x4, 0x93, 0x7, 0x2f, 0x4}, r7}}, 0x120) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}}}, 0x90) dup2(r0, r2) [ 1494.754609] device bridge1056 left promiscuous mode 01:08:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xf0ffffff}, 0x0) [ 1494.813085] device bridge1056 entered promiscuous mode 01:08:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3fc}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) [ 1494.978037] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:08:01 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0xfffffff5}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:08:02 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r2, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000600)={0xc, 0x8, 0xfa00, {&(0x7f0000000480)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x113, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010102}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) r6 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7, @loopback, 0x5}, {0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0x13}, 0xba7a}, r4, 0x3}}, 0x48) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f00000003c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000340), r4}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) 01:08:02 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) dup2(r0, r1) 01:08:02 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x4000000000000}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1495.280511] device bridge1057 entered promiscuous mode [ 1495.324366] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:08:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3fe}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:08:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xf1ffffff}, 0x0) 01:08:02 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x13f}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000003c0)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @ib={0x1b, 0x0, 0xd3, {"68f19e8b4d64cd13cb8dbe61bd31cd45"}, 0x4, 0x2c, 0x4}}}, 0x118) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r5 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r5, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x10) r6 = timerfd_create(0x3, 0x80000) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r7, 0x4, 0x1) dup2(r6, r7) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r8, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r8, 0x0, 0x10, 0x10, 0x0, @in6={0xa, 0x4e24, 0x2, @remote, 0x8}, @in={0x2, 0x0, @multicast1}}}, 0x118) 01:08:02 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @null]}, 0x48) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) dup2(r0, r1) 01:08:02 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x100000000000000}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1495.686071] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1495.842139] device bridge1058 entered promiscuous mode [ 1495.881088] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1495.918488] device bridge1058 left promiscuous mode [ 1495.962962] device bridge1058 entered promiscuous mode 01:08:02 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r3, 0x4, 0x1) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000180), r1, r3}}, 0x18) dup2(r0, r2) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r4, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffa}, {0xa, 0x4e23, 0xafe5, @loopback, 0x3}, r5, 0x5d2}}, 0x48) 01:08:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xfcffffff}, 0x0) 01:08:03 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x200000000000000}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:08:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:08:03 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000004240)={0x2020, 0x0, 0x0}, 0x2020) lseek(r2, 0x4, 0x1) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$FUSE_INIT(r4, &(0x7f0000000240)={0x50, 0xffffffffffffffda, r3, {0x7, 0x22, 0x8, 0x800, 0xb9f8, 0x20, 0x5, 0x8}}, 0x50) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1}}, 0x18) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) 01:08:03 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) dup2(r0, r1) 01:08:03 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x400000000000000}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1496.486052] device bridge1059 entered promiscuous mode 01:08:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xffff0000}, 0x0) 01:08:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x600}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:08:03 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) dup2(r0, r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) setsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000200)=0x407, 0x4) 01:08:03 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = socket$inet_smc(0x2b, 0x1, 0x0) fstatfs(r2, &(0x7f0000000280)=""/106) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r5 = syz_open_dev$vcsn(&(0x7f0000000140), 0x80000001, 0x80) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300), 0x13f, 0x2}}, 0x20) 01:08:03 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x700000000000000}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:08:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xffffa888}, 0x0) 01:08:04 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r2 = dup2(r0, r1) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)) r3 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r4, 0x4, 0x1) setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f00000048c0)={@multicast2, @remote}, 0xc) openat$cgroup_ro(r3, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) sendmmsg(r1, &(0x7f0000004780)=[{{&(0x7f0000000080)=@nfc_llcp={0x27, 0x0, 0x2, 0x4, 0x80, 0x5, "e03a807f716b5f783e69203907cbd1ee7df60b2bc655da325e809bdf9290e1a0b7af620404412f96cff5ac47be4f536f4d2719cbd3bbf4cbef5d3c968e8acf", 0x8}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)="e817bddd7fb9749b27d0e933143ec9f8ec5da5baee262af735d86ca87874e7b83fcfb510b4e02bbf9f5524457327907ba1f392853223074acafb94bca57e4273a13d2b440bab185117838e14e35d0cbcd0889a310e26ad0b1542fc5c8f5c23035560935f95e194a3546b9c0a87f90e8ec3d48ac7877e539bdfabce4e939acdd0a8ee06", 0x83}, {&(0x7f00000001c0)="02dc51b22d1ed76f4260d7eee448813b0581acf07b7488cbb807a74d0af7e968ec7347b8f0df6ad925f9a05aeedc7653ec4e24edb8580d428b2a45a0ef4c2e85bab497f7dcc5b8715c23ae44ba2c072884bf355a1e2e0cf7b5bde325ff4a4964a817a654651a5e973533f16bfe61471ed7ff21cc388d1672c7d5a0c02f081c96e6658afe3b7c05ed88ae77961147e0794e60f0e9624bff50c78804dab25571de1c672f0c4574d12696db2566791fd3a181b8c7f178b5d0c2ea14e1dd9c79e546612182597a6d06afa2c73c902c6db62e9c", 0xd1}], 0x2, &(0x7f0000000300)=[{0x90, 0x109, 0x1, "873371af3c5823df4b1e68ebb3a435194d1607be3d09c5f97b47c9579cfc608fef3b98ff1c4f7de142794eb68f7de52feb39b5cc51b3495abe109189332d67420b8a1ac8c998cc0e758e04a3798b1e1451eddaac5f85196639d1a589253d3663f266653646643df9365a2ff85e5d47e0c3dbf0756db0cffb1fdf7dcd18dbd7"}], 0x90}}, {{&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x42}, 0xf716}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000440)="28934f6afd2a91e0a928bb8a145a76204cfeff02f2bb9075e94b728d92eba75d7583b74eb44c5f4cb9ccd058e99101decd85254fddb4a1328adef96eac272acac3ac1fa24896bbf592cccb4585a5b22ba788a9009c5432d7a8bb68b4e9fa79d6a713624e38200bc36b4a2f8293b2f78662fbb00b236084edeff4bac2f0db038acd50dfc82cb8cacc6111ce5e7569b996300bc6f45c6a99915a030ceab3f6e6902f18fc8fa160485f695eaf04bde2460244e115b3d193032bd7e66400abb1c5b741279acfa76b613f54bcfc24596c4f", 0xcf}, {&(0x7f0000000540)="8dc3e5a5e470b4872f854192e920f7e61cfcaecba19430a216df4c9a59811423fb662a499f8b0b565bcc293442429a3dba8f20cc1130669d57219445f7660582b17d77f5df4fc4ce2806d479028dc6a063196089f1c4675549d4d5b1c2a77e41bb4564271434ed7afbd9747f776768cbc1a155ca3c4faa21f0414f26768bbbad0f6aa1985e43f96d7f21b663c11a5ab3ce1dd2c2eb0dfd", 0x97}], 0x2, &(0x7f0000000640)=[{0x10, 0x1, 0x2}, {0x18, 0x29, 0xfffffffa, "bb751d12d2024c29"}, {0x98, 0x10e, 0x2, "37b92a5e3af2eca84de6a9db69d3882ea63f7ad38445fe382638c9fea4ce38ddf50be8299ffc66bf3ef4f97a461e935ff6f54be1baba55cc94ebe5679208f471f58db7fdeb7381233f2fe38717b215639c3874aa87ea3fa544d72e6c96807dff823580712bba6ed87ad2b3ff8fc87961f49d857997e9699e3b900424b7af4a0cb6ae004a"}, {0x88, 0x102, 0x7, "54df8ba9e0011a7452265203802930b9e3e45696fc1a39ec6a2a904108a2f9ea8c5ec359c5edcaa06d75ab610282bd4532341d57628296ec9fae0db4f6f69e1e0b180c953379076cb5f7947b2d840d1859b5c0d96238d458709dc77330e7f0b454e740647f48c4ec76a1d03969b8e19e2e0b53d2b3058c2a"}], 0x148}}, {{&(0x7f0000006280)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @multicast2}, 0x4, 0x1, 0x2, 0x3}}, 0x80, &(0x7f0000002980)=[{&(0x7f0000000840)="837da01328b13f01b770c012ce5b4a82fc37937a0970a75897b7372627ba4f1d4f51f6ef1db528bbbde8f423015e87c2d05aaf00546cdf7fda47056f2e426a2babfc6b1ef3b2f0d86b6d3ea7ea261e09519db211775dbb505d133aa22b6a71f6e3efc00885598c2ae02dd47677e168162dc71891498d35974a5c827f994d1326237944e02452742314bc2fd84070bfeea7a088c96ac974bfa6c9bc0ed748e0b5fff18a2d5b501a5acf16ecf1c1f28974979ca7165df5a2602c79a323a15f4fa8c346b3ba8b55d5ece6a1558e9c333b55624143965a95460ae7e6c09e43a105f79b90b6", 0xe3}, {&(0x7f0000000940)="85f12a15f659c69b70bd791e7b0c7c129073b997b961a85ab9e6a3fe346d1258da8b0f77d60dec3f3f8b4494f619e1c54f9077a85fdb8f0863e10295333761afbf7d6de9436331b5e5fa378c0d0cbd31374276a7f9d2687bfaa1f05a253a5256082bfcadb14a186e0504b7ecd7051b151a3d6090dda88514bb2f5d29cbe063b8d34e70c91aaead43afbdb81f0fddecf3f0786ed57712e8452c0ab8fd11dec68b8527e0e98d37eb8e3625957ecb2f8425815c7b2fd8cfdacba92a799fc0f9739cf1abfd1bdca1f78686ed267b98468ef6976b449b2458b4899679cda60fbffcdd327ea45d9b4b38df0fd68da486df65abc7a1f986473bdc0d59a17bce3dc823598ac5d879b8b8f3dced230e97db0b793d0772924acb98f54cce18a4326a6a936756965686cf7d5d535950836355dc384e0ae07c49e1dd15e9f3708c73fb972ecae2736ac03a867c94d41e6ee8f64b05194fdafc254ccc164f933e9dcb82fe0d99517dacd8545743058fecf6bc8ca15ca9bd1a54395e379d0b518882580000b75b17d1ae21a3ab04d097b766f0a4d5510b116a05a8ef4268fd60fe0faf0f2c9315afae6062f979716f07fc6567fd664aa50a5f6ee558bc7a56b9e222009cbfe274fdecc9bad7c2f6f9d4fac82cb138572eec4ebf37bd070b697d69dde6841d9f1b21779918129b391ca0c441e538584d31757cda26dc34984c05324fd184ab31dacedc5d285f88ac9bfc01420398a7929719318f95888f00d392ec1498c5375b9497d6887e3c8d8a7ec066b54c48c75f36c88310f9a971ddadfb1d96361ee0310e3bf181d1d87e11503f56b2d009552c74d5ca5a2a5f7e27828b70ae255e8ce98a0b79eff27e1268860c0d5c19d8ff119d0d0b15663afcb1fceb32ea2a2a9ffa3635cc922a474b77dd97961d7871e1c506eb8f7a0dfc33b467b1994c9928058410887e54490b21f74df7988a1dbbcc5eca5726565a3561f46c11f8568aa250bd53d1060d2030712a7f5b71cffa05b8d5fcb25e7ca7635dd7b1283123930c15f02b7d5d18dae56b4bbb273688ecc4701190938f4d112bfae0662659c252c3fee3d2585566685dc8c2cf729ab01b0108d0b2374a0c36f8395356c575a102fd0b438343164c6c37801587c1b868addf532df3ffdc72acd7f01721f88d0dc40b44a591b46ce0ab44e250ec8388c11d15848bf8af3478c90db48b6af2ba25ef992cafb73aad4412e2525a14a59a088a30d8caf0fd9dc4bb8a745e379fb03fc6836b6668346491e5e397500b4c6e963f0663ed0516b11674085c346b4e2409190f9faca87a554fb49379c78985208242e52d1fd4eb85a3a11521708b8b94640d1bc866b04803feaab17867835807b5e32cfefa7a6e26406b57cd7d7c08ddc9cffabc14ecce607f1f53672e6e688e21c8685d2101968305071c4d68abb937e598195785c13ef3f2468a9c69e7628cc0c0b80ea3ee32c73bbf24d71e7cb2949a4ddae37dce9e0104e3f9ee3228508ea1533b543a30d2024d0a7443ea93f09e9eeccb7e6f4f6b99f48548100db7e63973451d58761b0e8e93bce0dd2f551ed35946c8475f5ad50d5cd751ba4f886c35bdbd962cc4c8e8c943cda2e326ec01ba32cdc18c6c61c7861b014915f31f9d55fc878de3a12eeb445d3b57c1444b29e3a4b51f377128f69882eff219ad74c200f4126f3c148172d480af32bbfc53f93445e1cfceb82a4dda7822b37ea87c98e7ae3c0c2d6574bb5d6a39a7627552b64232df8226352f47005088b7ceab151226553bb0bfc3007b486e7c5208cedf08b4284acded6eaa80eacc1129149b5f444454a0647821dde7944e28a87e087adfb9166311756175f53fe76b314f5779ed818ea006afe02f2c1ba86740d09f5b597421ae682c7fb78eeadd3376bffe11c9798a625cdc0e02dfb8aa1f7f28763410a88c3743012acf7174f6f184a3ada1f0cfee5a4e99fa96a4e1435411a51015fd0d37bbc8daaf07de35357a4db86ae7a56a671121ef7f6c3e3a33f2f26037ebadaa1907cc3375559bcbefa21da7adc7d3ea00ba39aa30215d6e6190a37e849f2ee7f08e3f1ef34e2eb6e763028cd0a1ed01be76b99abfb5c71296039712b5482dd7ae32a8739599d84c424dd0f76ec1c14c813842702b4ce05e7459e5eb3af9391b3f65db5c683d56cbfc02f61a9154008af70d77edc1592f248be2339a9f27f4a8517068cb286ae1e63effa00f026082959c42620bf0d09b36ab3e38afcb5f57b750895d1b9cae90ac3bfbcf6e3f08e97b3d8a0c8a2e153a94f2f981de6bb749ae11a4bae29e4df6d2fe34bce910d9c0d1684445e7ef5c96ac341ac9a3205f368a1dc83ecc679997a9c43d4244cd60a39f60730f020a820a2c3fa9bd384b5b8643563390903eea0532bf7b03ff181d2420ef3760424e83e42e87d0804cfdcc9a2d31c9029805052eb946b34af306f0d4eca486ba03e7dc1871838a472879d25c20cf800325fb863ce314df198a31529d295f3c154aa180de3587990f144297a46602a170b49922e4634d6772925ffcfa2e2eaea1efddda12d67a2fbdf26e8b88466bc7dc2f170f34a7473f60db17370fa3e45e9dce3fe3c74b1fe5621562b8a3b4741f69973a37d0ecbe620de4c4de85adf30149201b17f6ff288e039d4e47bc11c50b777a34ae0007a51b0d1c3eaffb9d4e761cdcbf85e144faa7b3c464f092d73479baa75ce59c7d17656a201d0ee1c52a23781efc94b44011050de29f27d5c54ec99f8fba986ce75fb569bb4a14d410a6b30f9f921ea3af523fa47a3328c6b05833388a11c0f8da200c742deeee9b89887f63fc2faae7720e57595a0904fe0ca86d616a0bc6114eecd142b2101e3cc432f06f839239c16fd506405076dffcb7312b6f8b9f3d4cced8a541bcdc1682a5213b4ca1d5f69146f3f1e5f7328ee3eabc6dcd953e0c91f9397cbb8d945c8d47bc25619be5df22cbabde511524440fbdd58cd13368172f0a99efddd0d7230524edb78f94e31b954445a44e47ddfef9c512ce5eb15d71e2f3011ea995f24fd1b41f3df838d463d38ce9d8b6ad4333574d0db7414446a06b1f449ab7b525e6852f1a9685ab77f81b47bc5015368074c5314e883f14cc8c41ef3be0744cea88a3124f5a53cda5f52c5ee1e094d47393c3e6b46095aeec89f0a2e40e28b453f4fa2ff59d1a28e7a86c2cf5e9b0948d2578b951c64ccb95c654abaf519b27bbaca45f80b7706bec16f350f8a90a8e0d966292f7c280ae6e976c80ead905586e9b00ecee916ebe0e846bd39e58f23f897743b36f23d451a704b0d7fa3de4ece8077b88717671b571577e158380a53560f07c5cc8c04a5d2221c236abc4698368c16e6ff9ead672b3464cb7a4a80420687c8a07c65d6c29b7c87fe3abb837ae44d82c2874b4be3c8b6f485d22bf1117207b953d7cfb6c1048090b1acb4ab4cde553d63cabaa8580270dec8b05a6b0196dc89bfa4e832ec0e247e4d9aaca35d9140621b83398a85a2cc38c6a7e3f7ec393a79a691dc6d5877ba6fcd27aeefdd2846f30115cd13c5433cdcdeb4997d38da4e6cb2fa9b045770d832684925f0acda26eeaa3ddcae5485f4a0765b1bd333a4f9171f3291f472b0458fe5306616554a3e2a70845076113cd1147bebf8e533980354c581f271c807e075e8ce01285e02d2500cb33d21f03fc8e77bf2e5398eef1e61423f5d2e07d7b82a56ae7c632b6539cb4ae4c3743dc97e391983ceb15e06365789f9a697576afff14245ce565e036ea21ab4212ff421f480f73d491af693d27c2e896424afc491d6981dade4da573aec25162dd9752ef6ad4b6f91d60d811f410abc97cdeed975618857ae377883d72ed88b1dd1812db788c297df91212d70ecc3487914905cc0fb78e8827d57012655bbaa616ffa9eb4f32e6ab309b4106dbbc3dc89d1583f59fed1185004df8742a15e5c62e5bbc6f28cbe2d5a7958b42679f392b1cdeb1d5a13a4346260a1ec3f2a3c14d7ceced2031b7df349a36d8e766c85c69dbb54e9cbdb32bcce843a72d7b6442f63a4f0328eb34547690a61205a6de52917f9db5ca503a2710ca7b539a954694db663ecd946ed39d14f155404cb52fab71cce6b17403637c714243847b63516630092884fb1bd3b37d4e25ee58799d91ce1764a646d01f09b1b97d9771b8af335e08f7bc53c732ed027f13ad95f00a8b11ac3bb974b2a07f7b63a1c89a7f630a96a0ef9134e40ebc2d7f03df04c779b4e61d06cfdb5b5c38e2b4a756ea033640e945cdd575146cd94d993ef6eba7a2d8b6122647b3f669fe305ffd8094dc1867e84e1e3c90e12af3b8361abac10f246368f4ee3e04540276ac0a81aa926320d2d1d4770a75610bb882c5e99ec55e5bc187230468931c0331ce316dba471877242da630e81b69a8fdc3a075e88df8aa0df23bb25d874e70c6b3815e4980f04abb1c77c7fd00d1b6ece44404cae40c886fb42391432592c2d9ff7945f822f4be74b3d3dfb3c2bbc2230bc47cc4b9c7bb718e4c89a78b59a8b4c5022f53145845d063ee1a6035be8f4e5d49a76e7e86dca5053f86733ef93219b3353567494a9f56c25589d29c054add6b9043042d131ffe740c179f9149096aa2935f39c92672bcc7e55f2617eace30ca911ee47dadeccd82334216f2de9647b79b3fb2a4aef904b64d6515b187ad631c90380f75a587e1e4c63cb593a867a5d62fbe572daf97d5418007cab7917e806fbe1d58b85e97a8641ad943192cef94df5836fc03211801d786cdf0b7c602ae616a737396045640c242292588097b2efd1098e912a3de703c4ef722865331456e490ca0b1202976d8fb289c9e3a14fc12ef62c8bc88cdd6eca010b174dd71f67435512d5feb51285068217c7176e68f0c4e6caa3f1e09b1acdd50b292bfad1e456c1535f9f2abd75000a3e4b06fe5a018d99d4204c41bb80b440c1ae21297460a0976821c78f61023a906fed60081bc20ae14be687f7a4f079c9012bb65fc86b9c782b7b367b741d32b8ca6f737f47fea4829909d2de04bd57aef95de25cb99c7cb48d4a3ae390bb1f107d9c8520728c6be58d38ed9b01d82d458709aa1649524d90ec21fa7637df3484fe22513ca60341715085cee9e81ed32f04e5886063d2d1e4e21a3a5f9cf14fece80e721c5330e5feb074fae6c3f8ee07fba07b2fc336518cb5af9360646652a8dfc7688cade50eff39e04d1f3fa4a4f069efea9f297c2fb8d2826184a55f9f109a4ce780e3f27e2f09945d60f7fce80513de51a73aa2f8237f9a3ea2cfced5e3bd8010286619fa3b6952643aec74e17fea3b6665bcae41da3814f8d34cfdb9d8732aca4ec96bf50019877dbeda9e3035cc9b999238c809c73ce8624f1089c91441c6c631ac289e91a9610f9381a2fee8cc164868552c991b7a7177ad2e68a5bed2e8f103e7fcffc32921f4205fc603bc4a4df122f72b90ac386e6add7242a9973eab9a40b07288413d7e891632a62536f67cdf44494f253fb92b549bb21b42f49e22ceecdbed96dd1f2d09daab01d791480079484e2c3476e60acd7905106ca9612636f57d3622470f80a900c48c76cf5448df508399d6d48abfd9c7a5715239320cbed3dd2eff8f7904a3e1922dcc6e1c06bd02770aa9a55869e9c17d2c2f8a5d947614971bac86c499c815a684be581c12b3348f4abac4467b64fb986c377b49cdeca636eb947e5600a1c632070ec4efb0f1e9a60cc117e6183c8033d11057fcd3fa0292fdbec46b3ec90d69de6ed44d7dc1a815f2f9e1f1489bbd0881bd3d23c314a", 0x1000}, {&(0x7f0000001940)="66d4bb6c3232de2a9775cf4026574988457f4f0b155328a567399ba460ce4f21cdc82b0660fddfc1bbac2e", 0x2b}, {&(0x7f0000001980)="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", 0x1000}], 0x4, &(0x7f00000029c0)=[{0x68, 0x104, 0x2, "8691f5c3be2a3eb45e586ab5a07d7eebea7c1b517acd779a1a3d09ea0701826ebb35b385047148fb1616d7acb161d3bc6b36e8c974dcdb19aaf0b80c8e92d24a0b26ce1f1e1fafbea7095da386bc480ff85030c66e3e2c2a"}], 0x68}}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000002a40)="8a32274278c3f15f455bc812745afb38273257910f29132676c4ce530ab357b29ae47130122e37f465c13a38e4aac87bbdd743a1e47c3ce2c27e34c4a76e30ce380e719de3b6dd648c74557296ab68cf3dd59766e89f6edbb589e19fa58466dbbdbb278875fe2be840cbaacc6757b0ebf906bbc4bc1dba14324aa11853aebaab7c85132025cc4a83d5273f4cf99d2ff3edb9b13be6a5249550b6ced2", 0x9c}, {&(0x7f0000002b00)="465b07226aa3bb2134cf77601cf3ac62a89d3255fe8b41d4fbcfdcc42af3becd41929cdb67260896073ad72d5a75a6b5e8341d25c3a13eed16d4fbf8f6c31644fcb7ee8d69f659bfcb546cbfa21b58c97cf87da056510acb58109a365b6461153fa0797c78fb8af5a4e6ed67160a7a35b9deb8f2e00c1e34db76311068f9ac3f0cb3c6aca73883f1c39e3b05e51d7929b503384e13f7e7cae48c8c222023af4c748330b845fff957f8928e4028fcc258ba9e79f3ea09c582d69ef9565f95783d5b629fe1b8020f30f251b2", 0xcb}, {&(0x7f0000002c00)="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", 0x1000}, {&(0x7f0000003c00)="7e44a0acee06a40ac79a8898f75e1db0c4ba046b3a112840046e5352cdd6f77507e5cfec", 0x24}, {&(0x7f0000003c40)="eb09917a63395256901f8cd7ce19496417bec0edda250064ee0d9ab2689b9036535184a1b9680a9d3f1168df6fa2a533cdc32247c2378a76386f01e1bb3d1171cd01ad386a62460d330c7891ee2b2503ccbcdacd64abbcea97d0273c459be4a151c8c856289178956d0296132c48fc1991d1bef08f72ec3fbdfb2c688dad54a3372ea609eb5d0515c36631c8e3a5ec82723e079467725ae530ab43a7bccacba7a1f2fa3e7e8e02c9f8afffd22098f258fc50f5b13e766ddcd1e438415513bb855c82a3d4320b777aecd94957849155e57e0dc87f4c7a4e2b53c0b4169fcc19bcd6ce9981f5245fc2fb829ea6e457b186b844587768429ede356f4b5269", 0xfd}], 0x5, &(0x7f0000003dc0)=[{0x98, 0x112, 0x1ff, "92cb65ff455f47f77f280e867c61c52013bcf1c61b8f89e59e4fff4a8ed5dcfe2529e03c56635ba20718ab75c10d94a43f9ee8fb914be1c7157c579a613f7e6f5a4fb4ee6de0a5b6c5a26d57f5219f9829ed332533017b6edb845ef6b243c79beb6496a3ecf15c3f2d111f50ea2d1253f0b25f44a72e4d0dd5f80541e02373f6506f8d0530"}, {0x98, 0x10d, 0x5ed6, "19734534c11c9259ddcb247bff9e66194e2bb51c0e0683d099979eba25030d5d225e5c3224b9a15bf513ffeb685df7b28954061658097085844da4793d5228e3630dd0d80b994136d91c7c47ad1b1bdd1149e54a8933008a15d49b9d8ba81fe8f2fd6a28f85ec84306c18310f7d1f36f51b0a8ea69382eeb83900f48d01b226b1bd4f79b048f0d89"}], 0x130}}, {{&(0x7f0000003f00)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x2, 0x4, 0x3, {0xa, 0x4e23, 0x5, @local, 0x3}}}, 0x80, &(0x7f0000004140)=[{&(0x7f0000003f80)="81f96db173524be4f4ef5594dbe84c044cf62f377c9ae9f5709215a837ae5f61530c82f695e52c07c9750f45606e3eb0e2042f3462e05a06dee9f8ee0d842695dbde8ad1f0bd0cb7b0567d1e011e59ecb9962366081c51662e6f76bc2eb27c0919e3c6e09bd3b7d5cc4eb2d04972e2b4cdc483c0548e", 0x76}, {&(0x7f0000004000)="bb75b20b2c1b6fa14d68f291fcaf912f77ca7f2abe3c4585de95e747ef4f0e161b90d7e81381e2ff5c366d8df587f915993174d705c94201855cd53f965453974483bc2064561277420821652d4e29eaea674e46c6574fc2a026b61292703e049f8e78f07d15a666785be09eb286305c68543638446bcb86ce7b83ccb9315a5619443c0b466c9ea4cca1368a6e92ff3ff7da31fe9e745f3ca20c29a239", 0x9d}, {&(0x7f00000040c0)="d98ea593257622e14b1b5917b8f14d50139a2e54ad6f6cf5f74b20de907678e8918a8c9cfbcf7e2f515f7ee9504e3aac94af9a5b657a47347407780515f10d331f31027df8d19cb3558187fcac0942c36e9d88db7e9da91c6dd37840df7ae522d923aad58b520628c415f24d59bf", 0x6e}], 0x3, &(0x7f0000004180)=[{0x48, 0x10e, 0x0, "8cd238aaa2bdff4147509523500211e7e656685d41d1ace6ef97527c97fbf0929103e51b73f6639991a625381484473d9c8d"}, {0xd8, 0x108, 0x0, "e7815eb855328df7bb405adf088d28df1d6d642ead4d4f4d85d801247d9fbc3b13f86b47d16e225ad27d2e970daed247518c7a9eada1ac07c12fa54475582134dcea06a690fe1b14ee75368dacfee5269be1c411a48c74c16a48bfb7ee49996a38472603bce23844ad0063b0e8eb7ef5d59ce7079076181c277601699d178d9976cecc89484e95b584c79259dbfb41a1267bca50fae6fc89b30deacafd1e92e38cfe22e6a27ad5d817d4363adff0b69e63685d6ce6445a321e8418143c350b57f878d3a7"}, {0x80, 0x3a, 0x8, "47951908e03e44838e28c1bf1e9a33092b46b60b2e384c85d8d4fdff5f62f8b135427896c34966cf33ce433fd57b4574e9bbd4d8d6dd282bc2529e56c730997629ffb7797d0e4985aa5777e6fe96258d6bbec6655db33cc469df256dec83067dfcf2a8a1eef341e60853ce"}, {0x108, 0x103, 0x100, "44e530c3e293fc57ec9b2a56421855cf7be88362353c8ddc6e9e0bdcae74354fa82b03395bc5d45e54c2f44bd7f9ad33184a8d7ae645cf7c6eb9f978a2551962e68f5d5933bd6e0741e32fd0013c5f8988456fe7826607b8179e4dcac9b5392c68bf8a2e473261ecde69ae3ca3b61333f38d70076b82a5a7d5e701bf41f9d3e5ced5e5bfbb7fe8926b866ad6e1c821e20c31eaac74f5eb135ee04f0e1e1ed14b78a3c02a3eb8ef37e75fadceb3b8377a0ff3755cd97dfc0b141e09bab8753d2e89a9577819cb28816d38ffad2132952e4255453f44ea5799a5be4222e9055047f4276857b82d4f2b48dd6ecfad4bb31b99"}, {0x108, 0x102, 0x1e2e, "d85c59feb7673b2a1c1223b8765a2db0d5ce3130cbd80c68d8efb183abb4fa6d885c73a4c3bc15441b054dbb7940dc21829ff6b1db3b7f42741a8fd6edb61eca1b56721d0aa97e527e4fb60b85f34002ba0eee518cff7732c62976c019d6a7cd5da49c34e41d0f12059e3d3a2f8fdb59c5a12a2ad3edff20ab8549a1f563a773f56c383b706b1c6a9025cbbd9ea749894afdebfd5cc0251cff2005fd38a26b116f77c2b5b13fcdd1e7540006cad96e19b7480157cd1508b50dcacaebabf0995ab150e80a4a92145dedc1b3817217245b8189bbc7db902d075d8cc5307780c9923269546dd6b00f14c3e03bd74b02274ad4"}, {0x90, 0x102, 0x3f, "fde69738f36d0339ec6e55340bc58c8ea58498c10c2a9c3e8ce3819e06cdf8914d3755dc9821d0869209a6de01ee69fc29c344f332b4ea8ac2533ad186c31320d6f319e6ec7f1b1fc8be86bf710d3877dbaa5fb123a941c88ea05861b27dd39ca8c23247a03fb1341ffbcf1f6253cc02312c77484627ff6920"}, {0x108, 0x109, 0x3ff, "a4648598c25e756d7a9478ef10da8c40fab321b53a98d94a1e435ff4c0ab6fda5b4430192e2c5ee34fd5fe7502f49ab4e7a937184686e986a2cbd07f129b8177d3309f0077f5937678078f6204cd4e3ec0ef76cc38bb33d5c372c36beb092a576e7b835b79c073e4f79b1240a2ab9e645301e1cc9c2273a32f49f56ad373c277964828e0648a49b8045d47313461a72b68c9ddb7e8796a5214804404e3b2226a64a3b609b565eed6067b1ac3e2659731de601470eaa34b9c44105202790a391b9a0ba3b8117f82aff592c16b890fb2eb260b277c4b9309d469ef72aacd82bc0a2260a904b8bd6a846bf42dc959970178d0"}, {0xb0, 0x88, 0x1000, "b4d4bceaeabc7e65c5f1ce5f235ac5c547caf9a2809f05db37790544674b97b92c30ff5e045c9f08b8e79055a436a0f77bba5d2ce744a84cf556d4a369aca6435f9837e8ccc7462b4b2527c0d15aabd9d73daba2a61e9e21227bdc186e6a36d6fa3a8679305a9237c8e0fe9262190df536071654cb3ba87878e078e1303e7d52112360190441af9d837673aafa2264838bbcc4cf645e3095725414a3b04ee1"}], 0x5f8}}], 0x5, 0x8040) 01:08:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xa00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:08:04 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) openat$cgroup_ro(r2, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x8, 0x10, 0x10, 0x0, @ib={0x1b, 0x7, 0x4, {"e58170f21eb369fbbee333c5c5deca7c"}, 0xf98, 0x9, 0x9}, @in={0x2, 0x0, @local}}}, 0x118) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) 01:08:04 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x800000000000000}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:08:04 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x900000000000000}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:08:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xfffff000}, 0x0) 01:08:04 executing program 2: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) 01:08:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xc00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:08:04 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000640)={0x14, 0xfffffffffffffd90, 0xfa00, {r4, 0x30, 0x0, @in6={0xa, 0x4e24, 0xfffffbff, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3ff}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r7, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000500)={0x15, 0x110, 0xfa00, {r7, 0x20, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, @ib={0x1b, 0x2, 0x0, {"7c387481f990e8ce8047b1ce3de649b0"}, 0x4, 0x0, 0xbb02}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r9, 0x0, 0x10, 0x10, 0x0, @in6={0xa, 0x4e24, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xff, @mcast1, 0x400}, {0xa, 0x4e22, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x2c6e}, r5, 0x1f}}, 0x48) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x5, 0x6000, "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", 0x4, 0x9, 0x7, 0x6, 0xc0, 0xff, 0x9}}}, 0x128) 01:08:04 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0xe00000000000000}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:08:04 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) dup2(0xffffffffffffffff, r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) setsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f0000000180)=0x40, 0xfffffffffffffe73) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000220500002abd7000fbdbdf250200005c4fac7a32c91df785"], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) [ 1497.712084] validate_nla: 16 callbacks suppressed [ 1497.712093] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1497.738005] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:08:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xffffff7f}, 0x0) [ 1497.870838] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1497.894173] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:08:04 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x224e000000000000}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:08:04 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) dup2(r0, r1) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000540), 0x200, 0x0) ioctl$SIOCAX25NOUID(r2, 0x89e3, &(0x7f0000000580)=0x1) 01:08:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xe00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:08:05 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x400000000000020, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000003c0)=[{0x10, 0x0, [0x0, 0x8001, 0x7, 0x24000000, 0x469a8877, 0x40, 0x4, 0x7, 0x8bc, 0xffffff7f, 0x4, 0x2c, 0x6, 0x8001, 0x7, 0x4]}, {0x1, 0x0, [0x10000, 0x1, 0x1, 0x2, 0x0, 0x0, 0xdd8, 0x3, 0x8, 0x74, 0x2, 0xffff, 0x1, 0x9, 0x8, 0x10000]}, {0x1d, 0x0, [0x4, 0x9c, 0x0, 0x10000, 0x5, 0x0, 0x3019, 0xbc, 0x1f, 0x8, 0xfff, 0x8000, 0x100, 0xffffffff, 0xa3a9, 0x8]}, {0x0, 0x0, [0xc4, 0x3, 0x63, 0x5, 0x1000, 0x1, 0x4, 0x6, 0x3, 0xffffffff, 0x8, 0x0, 0x1, 0x0, 0x786c00]}, {0x15, 0x0, [0x0, 0x6, 0x5, 0x3, 0x80000001, 0x0, 0x81, 0xb, 0xac8b, 0x80000000, 0x0, 0x8, 0x20, 0x75, 0x2, 0x1a]}, {0x32, 0x0, [0x40, 0x583, 0x1000, 0x3, 0x1, 0x8, 0x4, 0x1, 0x9, 0x8, 0xffffffff, 0x10000000, 0x4, 0xffffffff, 0x6, 0x3]}, {0xa, 0x0, [0x7bb2, 0x6, 0x82, 0xff, 0x9, 0x5, 0x3, 0x6, 0xffffffff, 0x1, 0x2c95, 0x7fff, 0x6, 0x0, 0x2002, 0x40]}, {0x8, 0x0, [0x6d9, 0x10000, 0x401, 0x7fffffff, 0xfffffbff, 0x0, 0x6, 0x7, 0xc4b, 0x5, 0x7, 0x9, 0x6, 0xffffff00, 0x6, 0x2]}], r1, 0x1, 0x1, 0x240}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x10001, @local, 0xc4400}, {0xa, 0x4e22, 0xffffffff, @mcast2, 0x4}, r4, 0x3}}, 0x48) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x7c, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, r1}}, 0x30) 01:08:05 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x3f00000000000000}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:08:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xffffff9e}, 0x0) [ 1498.234376] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1498.252303] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:08:05 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3) r2 = dup2(r0, r1) getsockopt$netlink(r2, 0x10e, 0x5, &(0x7f0000000000)=""/27, &(0x7f0000000040)=0x1b) pwritev(r2, &(0x7f0000002480)=[{&(0x7f00000003c0)="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", 0x1000}, {&(0x7f0000000080)="4dec9c79b1b3e2094549161488e80d8aee55b4bf06c4ec505631146228d3bd7cdd7c1c0edaad250b1a082e5a205c2fd858b8689d6f2e2170f52513a58768cf503076cd3ea4d76e86af1a8e6f42db8c2d3fe3e4241baf88ef144fac1ba46c4d54dc3476028ef0d1df5b2ca47728b27cd2122288153fab088142bdabee77ede6a31e807de84522aa930bdc2252c9c3e861411449445b77813dad2777d2792b1d9a47ef062bc9da92073d5fa643b6c841", 0xaf}, {&(0x7f0000000140)="60f5756e6251bd980861e0c94f5d74b909e38e38733a946387d2662722cf379c0b272710f508a7e348b3cd1870f8034ae83cdc2e690493d34930a99f0118e0bb48c44799d187adae42ab9e282ae670a6cf822e35f3b097c63151573cf5437e48d43bb267d9beee42ecf9ecfe57e3cf29ea6923d2aceb0b157d28a8ae2d0a0c5f3c86ef8967ccd90ab63fc20231394c73661ce438155c384dc2fb4907d6d5e25dd4e5e4ab5212657f58f069d6328c4ae2f3ebda75dc8f7749d457a936d7393df33426a00a229029261313b91efa10cdc6d1f428c058f4424c99dd85d42c2a", 0xde}, {&(0x7f0000000240)="da4cf13c8a2ab400c7ebd5519e6f065a9d8243e454dffa16f40e991b5fc68222c21d12b303bc78bfd8ba52f3ae19ca2353a3fc593aee2f8065c37ba3aea1772ba6fda2687ca68dcea99fbc4dc0a2d18db121ca89dbbf5bf16aaed6d70a89ef3e659a0fb0057b8b99d85b624f4d69ad303c74418f7e06a7293e4e349d9f986576b71d974fec392bdaf4cd7f6ad8661fd3739e1caf8a19f273f1450a54f10ae1eac3ec8cc1eeb2c84f", 0xa8}, {&(0x7f0000000300)="ae14f3ff80d059b897ef25b03d87b68a2563ae825040320d911ad92525c9939eb624c17ed78698c7b598", 0x2a}, {&(0x7f00000013c0)="e1d9766021e1fea2f9afc7c633c08bacfc2b67b3b4b65a020fd3c5163d9958813370e8f752c9366441224a314d1a55f2214554255ca073824db1ba77eca5b92443a378039181542a754d0a32f9a48c15bb615bedf8943d85b1b2eef20e2f61efe88b362406d1a1e062ffab7e9bf7991df752a91ec22e1e6070c8a8357458c9e0976d871d8fd5ec15e828a3083702362d6a96cc", 0x93}, {&(0x7f0000001480)="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", 0x1000}], 0x7, 0xfffffffb, 0x1397) 01:08:05 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) [ 1498.503808] nla_parse: 10 callbacks suppressed [ 1498.503817] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:08:05 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x4800000000000000}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:08:05 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) dup2(r0, r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r2, 0x4, 0x1) bind$ax25(r2, &(0x7f0000000000)={{0x3, @bcast, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) 01:08:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) [ 1498.766395] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1498.816377] netlink: 'syz-executor.4': attribute type 7 has an invalid length. 01:08:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xfffffff0}, 0x0) [ 1498.871526] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1499.000434] device bridge1066 entered promiscuous mode 01:08:05 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x6000000000000000}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1499.043573] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:08:06 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x109) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) 01:08:06 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) dup2(r0, r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r3, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r4) dup2(r3, r4) read$FUSE(r2, &(0x7f00000003c0)={0x2020}, 0x2020) lseek(r2, 0x4, 0x1) listen(r2, 0x0) [ 1499.192589] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1499.232306] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1499.269525] device bridge1066 left promiscuous mode [ 1499.289176] device bridge1066 entered promiscuous mode 01:08:06 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x8dffffff00000000}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1499.323491] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:08:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:08:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xfffffff1}, 0x0) 01:08:06 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="1989fc40f7ad907543c5649bfea60abb8e5cec978aceef145238f9ef3a73c9c4a771174cbc27ffcad796701c7cd8e4aa41e3f2528b119caf7fa58627bd257637fd64c69893b3c489baabb3787c6068c95bd9e693fece3f88fad355065ac3505de23440cc2426b6470ef95a75f881f327fb8815a4ef7887c2cbb4961b1a9f4ee2cf4b14be89f37949285364eacbcf8b19683bf3984fb4b7d0cf20b5999feaf0f964db1abad05348ec30b6d1f6f838c77fb41c52aab3b50374ac6d468298672a8689f441c9e5be86960434c1a8694707a5c0ca8c04a7", 0xd5}, {&(0x7f0000000100)="e98caef6e21542ee9cf0511dbf7761b4b35c4b45a387a32085db25cebaa3186bc9e8365966b78f9e18d50ad6883aa020fe35fea8f648e19ebf80e28af0bfcda4f15ad16103fe226c4510dfd50407c693778924d2e38753943a619c01ffb885c173a8e1da96cc20b3f21a7d303ed74285d37ffb4b925c6d9e7fec", 0x7a}, {&(0x7f0000000180)="70282d40682fdeb817af49fd092857ac385efd8bb4aba5a382beed95ea24efbeec", 0x21}], 0x3) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) dup2(r0, r1) [ 1499.547859] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:08:06 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0xf5ffffff00000000}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:08:06 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r3}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @ib={0x1b, 0x7, 0x7, {"7c1c65d0926d45d8d06b0d67fadd7d5d"}, 0x2, 0x101, 0x7}}}, 0x118) 01:08:06 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) dup2(r0, r1) [ 1499.887954] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:08:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x2e02}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:08:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xfffffffc}, 0x0) 01:08:06 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0xfc00000000000000}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:08:07 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0xfffffffffffffdf0, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @ib={0x1b, 0x1, 0x283, {"371c000000000000001c00"}, 0x1f, 0x7, 0x8}, @ib={0x1b, 0x80, 0x80000001, {"271b9d0d573989ad27995428a62d73fc"}, 0x5, 0x445c, 0x8}}}, 0xffffffffffffffc3) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) [ 1500.136737] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:08:07 executing program 2: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000000)={0x2, 0x20, 0x41, 0x40, "2d87284e90c39c379b29d64458656612d45a04d86cf9de4630f2c63c09da2028"}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x3, @mcast2, 0x80000001}, {0xa, 0x4e21, 0x40, @mcast2, 0x9}, r1, 0xa0a6}}, 0x48) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r3 = dup2(r0, r2) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x111, 0x3}}, 0x20) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="6800000024008b0d00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00000000280008801c000100000000000000000000000000000000000000000001000000060002000000000008000e00ff00000008000d000600000009000100636c736163740000"], 0x68}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x29, 0xa4, 0x5, 0x6, 0x2a, @remote, @remote, 0x8000, 0x8, 0x3f, 0x8}}) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRES32=r2], 0x68}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x6b, 0x4, 0x40, @dev={0xfe, 0x80, '\x00', 0x35}, @mcast1, 0x7800, 0x8f7f9862ba3be8d1, 0x3, 0xdd2d}}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="48010000", @ANYRES16, @ANYBLOB="000127bd7000fcdbdf250f00000014000180080003000300000008000100", @ANYRES32, @ANYBLOB="680001e73d1ed5b1054deca58008000100", @ANYRES32, @ANYBLOB="14000200766c616e3100000000000000000000000800030002000000140002006970366772653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="14000200766972745f776966693000000000000008000100", @ANYRES32, @ANYBLOB="300001801400020076657468315f76360265c99cbda68f03b024a003409a536c616e0000", @ANYRES32, @ANYBLOB="08000300020000004c0001801400020076657468315f766c616e00000000000008000100", @ANYRES32=r5, @ANYBLOB="080003008407c53d140002006970766c616e3000000000000000000008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="1cd89d82fb4cbb38", @ANYRES32=r9, @ANYBLOB="0800030003000000080003000300000020000180140002006272696467655f736c6176655f3000000800030002000000"], 0x148}, 0x1, 0x0, 0x0, 0x30000000}, 0x40) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x58}}, 0x0) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000001c0)={0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0xc) [ 1500.353650] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:08:07 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0xfe80000000000000}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:08:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x238000000000}, 0x0) 01:08:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:08:07 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x20082, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x1, @loopback, 0x2}, {0xa, 0x4e20, 0x5, @empty, 0x4}, 0xffffffffffffffff, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r2, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) [ 1500.691816] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:08:07 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x400102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x111, 0x8}}, 0x20) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) dup2(r2, r1) 01:08:07 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0xfec0000000000000}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1500.912070] device bridge1069 entered promiscuous mode [ 1500.965399] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:08:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3602}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:08:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xffff00000000}, 0x0) 01:08:08 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r0, 0x4, 0x1) sendto$inet6(r0, &(0x7f0000000000)="c3ff5ddceab136b019b5acb7b2550718b2966c925a06f5e380026224e911859e2f8e4ae64c6ef076550f16752956ce2981fd4eed85d07b874f765b886981f7155c96e2dd3a00c4cbc3cd757efbf5ae9c3ffaa4ce29", 0x55, 0x0, &(0x7f0000000080)={0xa, 0x4e1e, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r1 = getpid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001500)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2002, &(0x7f00000015c0)={0xa, 0x0, 0x0, @remote}, 0x1c) syz_genetlink_get_family_id$nl80211(0x0, r2) sched_setscheduler(r1, 0x5, &(0x7f0000000100)) getpid() mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x8080, 0x0) rename(0x0, 0x0) getdents64(r3, &(0x7f00000003c0)=""/257, 0x101) 01:08:08 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0xff00000000000000}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:08:08 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0xffffffff, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r4 = syz_open_dev$audion(&(0x7f00000001c0), 0x3f, 0xc000) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r5}}, 0x18) ioctl$SG_SET_DEBUG(r4, 0x227e, &(0x7f0000000340)) 01:08:08 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0xffffffff00000000}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:08:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x40030000000000}, 0x0) 01:08:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3e03}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:08:08 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) 01:08:08 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x0, 0x2}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:08:09 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x8, @local, 0x2}, {0xa, 0x4e24, 0x1, @private0, 0xb8c9}, 0xffffffffffffffff, 0x2}}, 0x48) dup2(r0, r1) 01:08:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) 01:08:09 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x0, 0x3}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:08:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x4e00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:08:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x100000000000000}, 0x0) 01:08:09 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x0, 0x4}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:08:09 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) epoll_create(0xff) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r0, r1) 01:08:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x5865}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:08:09 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={r1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000140)={r1, 0x5}, &(0x7f00000001c0)=0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) 01:08:09 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x0, 0x6}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1503.060722] validate_nla: 18 callbacks suppressed [ 1503.060731] netlink: 'syz-executor.4': attribute type 7 has an invalid length. 01:08:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x200000000000000}, 0x0) [ 1503.134534] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:08:10 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000700), 0xd87126f000c37e4d, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="870e010200000000fc0000000000000000000099f19a195965635500000000000000000000000101ff020000000000000000000000000001fc000000000000000000000000000000fe800000000000009c032b1efde9290300000000000000bbff010000000000000000000000000001ff02000000000000000000000000000132446063caebbdd79f10bc162b584491c18ac06359636261a2bb5d657123957bd90ace444b78d728e2a617874be8d3e4ddc9af92ac7239cd55a9f39a9b50e550aec7b847c031e9e5"], 0x78) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) dup2(r1, r2) 01:08:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x6000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:08:10 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x0, 0x7}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1503.539172] netlink: 'syz-executor.4': attribute type 7 has an invalid length. 01:08:10 executing program 2: arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x4) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) dup2(r0, r1) [ 1503.581003] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1503.694724] nla_parse: 9 callbacks suppressed [ 1503.694735] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:08:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x300000000000000}, 0x0) 01:08:10 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x0, 0x8}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1503.748249] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1503.774475] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:08:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x6558}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:08:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xc00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) [ 1503.950839] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:08:11 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x0, 0x9}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1504.092546] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1504.116871] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 01:08:11 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0), 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) [ 1504.144628] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 1504.183348] netlink: 'syz-executor.4': attribute type 7 has an invalid length. 01:08:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x400000000000000}, 0x0) [ 1504.263764] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:08:11 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x0, 0x10}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:08:11 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000140)={0x5, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x2}}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r4}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r6, 0x4, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r6, &(0x7f00000005c0)={0x9, 0x108, 0xfa00, {r7, 0xb4, "9c7921", "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"}}, 0x110) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0xfffffffffffffe40, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @remote}, @in={0x2, 0x0, @local}}}, 0x118) 01:08:11 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x0, 0x223}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:08:11 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000004240)={0x2020}, 0x2020) lseek(r2, 0x4, 0x1) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0xffffffff, 0x10, 0x10, 0x0, @in={0x2, 0x9, @private=0xa010101}, @in={0x2, 0x4e20, @private=0xa010102}}}, 0x118) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) 01:08:11 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x0, 0x300}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:08:12 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000240)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000700)='.pending_reads\x00', 0x30b280, 0xc) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000780)={0x12, 0x10, 0xfa00, {&(0x7f0000000740), r1}}, 0x18) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x1, @mcast2, 0x3ff}, {0xa, 0x4e23, 0x2, @remote, 0x1}, r4, 0x81}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f00000003c0)={0x15, 0x110, 0xfa08, {r4, 0x7ff, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x118) 01:08:12 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x0, 0x306}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1505.616510] device bridge1075 entered promiscuous mode [ 1505.654174] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1505.772187] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:08:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x6603}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:08:12 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={r1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000140)={r1, 0x5}, &(0x7f00000001c0)=0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @loopback}, @in={0x2, 0x0, @remote}}}, 0x118) 01:08:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xc00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:08:12 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x0, 0x30a}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:08:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x500000000000000}, 0x0) [ 1506.079293] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:08:13 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback={0x0, 0x3e8}}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:08:13 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x40) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1db9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x5, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x240000, 0xd6) sendfile(r0, r3, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004db80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000780)={r5, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004e640)={0x8000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x2, "ab719fab8858d1"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f000004f640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000004f840)={0x1, [{}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0}], 0x3, "736aa7c128f901"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000050840)={0xa7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {r8}], 0x4, "c06d01e21db5fa"}) fallocate(r4, 0x20, 0x0, 0xfffffeff000) fallocate(r4, 0x0, 0x0, 0x10000101) 01:08:13 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:08:13 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpgid(r1) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0x5, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffa) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x500000a, 0x2010, r4, 0x19e59000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r5, 0x20, 0x0, 0xfffffeff000) syz_open_dev$audion(&(0x7f0000000040), 0x1, 0x1) fallocate(r5, 0x0, 0x0, 0x10000101) 01:08:13 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x2}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1506.560637] audit: type=1804 audit(1634692093.443:2130): pid=10091 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/530/bus" dev="sda1" ino=15166 res=1 [ 1506.659468] audit: type=1804 audit(1634692093.533:2131): pid=10094 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/530/bus" dev="sda1" ino=15166 res=1 01:08:13 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x4}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:08:13 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x6, @remote, 0x8}, @in6={0xa, 0x4e21, 0x12, @mcast2}}}, 0x118) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f00000005c0)={0x3, &(0x7f0000000540)=[{0x1, 0xe9, &(0x7f00000003c0)="f188a85882dbbf00e4210365bd6522dad1d05e657d1e058eb279f2dd65531b8ca4010daaf9c3ba60d578ce5e26cbe262ef24255f1bb25b7010f643e7b2c02d4e47fc20b14689776d7787186161084df0494908342706aac18587c9b7e10e108f31f477aa3bbbc0a88e3813d02b1c5466966713729970d5a198d8828d2672d0f962b44c4bc2f117898f77703750601349601198747f7793f727a613b9bf7aea7450211c15316e8574a182c0c2f9e6c89218c40e7b8356775f545b4ecffc293fd2fe4be556791be2144e87daa97629e0a8622c7fa68d42525d696d71954bee5a57ba50ff3f2a00b99830", 0x1, 0x1}, {0x8, 0x1e, &(0x7f0000000340)="fd25d10e15969cf09d620cc840b76929b11832c4e9570a3d4ad3939c246f", 0x1}, {0x800, 0x7b, &(0x7f00000004c0)="f1f722a9d23f0356678f2fe4c0825b6cd7800392830c764ee47271a76bf4a0f71da43aae2abcb79ac8e0a13b7193828c05dfe0c585d2f80445f557c94355bef21e840e6992c11e3052ee07dbc7ad888efb8a9b52ddbe21b71893300758ed241e6db891e7add078b1372a88a5e0fd7f4f52a7642d05fae129e9e9ef", 0x0, 0x1}]}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000004240)={0x2020}, 0x2020) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x5, @mcast1, 0xa4f3}, r4}}, 0x30) lseek(r2, 0x4, 0x1) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) dup2(r0, r1) [ 1507.077007] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1507.211232] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:08:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x6e00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:08:14 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x7}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:08:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xc00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:08:14 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x6, @remote, 0x8}, @in6={0xa, 0x4e21, 0x12, @mcast2}}}, 0x118) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f00000005c0)={0x3, &(0x7f0000000540)=[{0x1, 0xe9, &(0x7f00000003c0)="f188a85882dbbf00e4210365bd6522dad1d05e657d1e058eb279f2dd65531b8ca4010daaf9c3ba60d578ce5e26cbe262ef24255f1bb25b7010f643e7b2c02d4e47fc20b14689776d7787186161084df0494908342706aac18587c9b7e10e108f31f477aa3bbbc0a88e3813d02b1c5466966713729970d5a198d8828d2672d0f962b44c4bc2f117898f77703750601349601198747f7793f727a613b9bf7aea7450211c15316e8574a182c0c2f9e6c89218c40e7b8356775f545b4ecffc293fd2fe4be556791be2144e87daa97629e0a8622c7fa68d42525d696d71954bee5a57ba50ff3f2a00b99830", 0x1, 0x1}, {0x8, 0x1e, &(0x7f0000000340)="fd25d10e15969cf09d620cc840b76929b11832c4e9570a3d4ad3939c246f", 0x1}, {0x800, 0x7b, &(0x7f00000004c0)="f1f722a9d23f0356678f2fe4c0825b6cd7800392830c764ee47271a76bf4a0f71da43aae2abcb79ac8e0a13b7193828c05dfe0c585d2f80445f557c94355bef21e840e6992c11e3052ee07dbc7ad888efb8a9b52ddbe21b71893300758ed241e6db891e7add078b1372a88a5e0fd7f4f52a7642d05fae129e9e9ef", 0x0, 0x1}]}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000004240)={0x2020}, 0x2020) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x5, @mcast1, 0xa4f3}, r4}}, 0x30) lseek(r2, 0x4, 0x1) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) dup2(r0, r1) 01:08:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x600000000000000}, 0x0) [ 1507.400717] audit: type=1804 audit(1634692094.283:2132): pid=10094 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/530/bus" dev="sda1" ino=15166 res=1 [ 1507.471906] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de 01:08:14 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x8}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:08:14 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x6, @remote, 0x8}, @in6={0xa, 0x4e21, 0x12, @mcast2}}}, 0x118) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f00000005c0)={0x3, &(0x7f0000000540)=[{0x1, 0xe9, &(0x7f00000003c0)="f188a85882dbbf00e4210365bd6522dad1d05e657d1e058eb279f2dd65531b8ca4010daaf9c3ba60d578ce5e26cbe262ef24255f1bb25b7010f643e7b2c02d4e47fc20b14689776d7787186161084df0494908342706aac18587c9b7e10e108f31f477aa3bbbc0a88e3813d02b1c5466966713729970d5a198d8828d2672d0f962b44c4bc2f117898f77703750601349601198747f7793f727a613b9bf7aea7450211c15316e8574a182c0c2f9e6c89218c40e7b8356775f545b4ecffc293fd2fe4be556791be2144e87daa97629e0a8622c7fa68d42525d696d71954bee5a57ba50ff3f2a00b99830", 0x1, 0x1}, {0x8, 0x1e, &(0x7f0000000340)="fd25d10e15969cf09d620cc840b76929b11832c4e9570a3d4ad3939c246f", 0x1}, {0x800, 0x7b, &(0x7f00000004c0)="f1f722a9d23f0356678f2fe4c0825b6cd7800392830c764ee47271a76bf4a0f71da43aae2abcb79ac8e0a13b7193828c05dfe0c585d2f80445f557c94355bef21e840e6992c11e3052ee07dbc7ad888efb8a9b52ddbe21b71893300758ed241e6db891e7add078b1372a88a5e0fd7f4f52a7642d05fae129e9e9ef", 0x0, 0x1}]}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000004240)={0x2020}, 0x2020) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x5, @mcast1, 0xa4f3}, r4}}, 0x30) lseek(r2, 0x4, 0x1) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) dup2(r0, r1) [ 1507.697018] audit: type=1804 audit(1634692094.583:2133): pid=10091 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/530/bus" dev="sda1" ino=15166 res=1 [ 1507.722026] audit: type=1804 audit(1634692094.603:2134): pid=10129 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/530/bus" dev="sda1" ino=15166 res=1 01:08:14 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) r2 = getpgid(0x0) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = getpid() perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x40, 0x6, 0x8, 0x0, 0x4, 0x8608, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xcd, 0x2, @perf_config_ext={0xb46f, 0x30000000}, 0x100f0, 0xbb78, 0x3f, 0x2, 0x3, 0x262, 0x6024, 0x0, 0x93fe, 0x0, 0x1e}, r4, 0xd, r3, 0xc) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200)={'#! ', './bus', [{0x20, '/dev/cachefiles\x00'}], 0xa, "f5c3"}, 0x1c) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0xdc, 0x8, 0x0, 0x7, 0x0, 0x2, 0x0, 0x5, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7fffffff, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x84, 0x1, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x1000, 0x0, 0x8}, r4, 0x10, r5, 0x2) r6 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r6, r6, &(0x7f0000000000)=0x5, 0x0) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r8 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r8, 0x20, 0x0, 0xfffffeff000) fallocate(r8, 0x0, 0x0, 0x10000101) [ 1507.795203] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de 01:08:14 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x6, @remote, 0x8}, @in6={0xa, 0x4e21, 0x12, @mcast2}}}, 0x118) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f00000005c0)={0x3, &(0x7f0000000540)=[{0x1, 0xe9, &(0x7f00000003c0)="f188a85882dbbf00e4210365bd6522dad1d05e657d1e058eb279f2dd65531b8ca4010daaf9c3ba60d578ce5e26cbe262ef24255f1bb25b7010f643e7b2c02d4e47fc20b14689776d7787186161084df0494908342706aac18587c9b7e10e108f31f477aa3bbbc0a88e3813d02b1c5466966713729970d5a198d8828d2672d0f962b44c4bc2f117898f77703750601349601198747f7793f727a613b9bf7aea7450211c15316e8574a182c0c2f9e6c89218c40e7b8356775f545b4ecffc293fd2fe4be556791be2144e87daa97629e0a8622c7fa68d42525d696d71954bee5a57ba50ff3f2a00b99830", 0x1, 0x1}, {0x8, 0x1e, &(0x7f0000000340)="fd25d10e15969cf09d620cc840b76929b11832c4e9570a3d4ad3939c246f", 0x1}, {0x800, 0x7b, &(0x7f00000004c0)="f1f722a9d23f0356678f2fe4c0825b6cd7800392830c764ee47271a76bf4a0f71da43aae2abcb79ac8e0a13b7193828c05dfe0c585d2f80445f557c94355bef21e840e6992c11e3052ee07dbc7ad888efb8a9b52ddbe21b71893300758ed241e6db891e7add078b1372a88a5e0fd7f4f52a7642d05fae129e9e9ef", 0x0, 0x1}]}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000004240)={0x2020}, 0x2020) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x5, @mcast1, 0xa4f3}, r4}}, 0x30) lseek(r2, 0x4, 0x1) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) dup2(r0, r1) 01:08:14 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x9}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1507.901239] audit: type=1804 audit(1634692094.783:2135): pid=10156 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/531/bus" dev="sda1" ino=15166 res=1 [ 1508.014201] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1508.037854] audit: type=1804 audit(1634692094.883:2136): pid=10162 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/531/bus" dev="sda1" ino=15166 res=1 01:08:15 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0xe}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:08:15 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x6, @remote, 0x8}, @in6={0xa, 0x4e21, 0x12, @mcast2}}}, 0x118) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f00000005c0)={0x3, &(0x7f0000000540)=[{0x1, 0xe9, &(0x7f00000003c0)="f188a85882dbbf00e4210365bd6522dad1d05e657d1e058eb279f2dd65531b8ca4010daaf9c3ba60d578ce5e26cbe262ef24255f1bb25b7010f643e7b2c02d4e47fc20b14689776d7787186161084df0494908342706aac18587c9b7e10e108f31f477aa3bbbc0a88e3813d02b1c5466966713729970d5a198d8828d2672d0f962b44c4bc2f117898f77703750601349601198747f7793f727a613b9bf7aea7450211c15316e8574a182c0c2f9e6c89218c40e7b8356775f545b4ecffc293fd2fe4be556791be2144e87daa97629e0a8622c7fa68d42525d696d71954bee5a57ba50ff3f2a00b99830", 0x1, 0x1}, {0x8, 0x1e, &(0x7f0000000340)="fd25d10e15969cf09d620cc840b76929b11832c4e9570a3d4ad3939c246f", 0x1}, {0x800, 0x7b, &(0x7f00000004c0)="f1f722a9d23f0356678f2fe4c0825b6cd7800392830c764ee47271a76bf4a0f71da43aae2abcb79ac8e0a13b7193828c05dfe0c585d2f80445f557c94355bef21e840e6992c11e3052ee07dbc7ad888efb8a9b52ddbe21b71893300758ed241e6db891e7add078b1372a88a5e0fd7f4f52a7642d05fae129e9e9ef", 0x0, 0x1}]}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000004240)={0x2020}, 0x2020) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x5, @mcast1, 0xa4f3}, r4}}, 0x30) lseek(r2, 0x4, 0x1) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) [ 1508.267689] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1508.708793] audit: type=1804 audit(1634692095.593:2137): pid=10162 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/531/bus" dev="sda1" ino=15166 res=1 [ 1508.752540] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:08:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x6f03}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:08:15 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x48}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:08:15 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x6, @remote, 0x8}, @in6={0xa, 0x4e21, 0x12, @mcast2}}}, 0x118) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f00000005c0)={0x3, &(0x7f0000000540)=[{0x1, 0xe9, &(0x7f00000003c0)="f188a85882dbbf00e4210365bd6522dad1d05e657d1e058eb279f2dd65531b8ca4010daaf9c3ba60d578ce5e26cbe262ef24255f1bb25b7010f643e7b2c02d4e47fc20b14689776d7787186161084df0494908342706aac18587c9b7e10e108f31f477aa3bbbc0a88e3813d02b1c5466966713729970d5a198d8828d2672d0f962b44c4bc2f117898f77703750601349601198747f7793f727a613b9bf7aea7450211c15316e8574a182c0c2f9e6c89218c40e7b8356775f545b4ecffc293fd2fe4be556791be2144e87daa97629e0a8622c7fa68d42525d696d71954bee5a57ba50ff3f2a00b99830", 0x1, 0x1}, {0x8, 0x1e, &(0x7f0000000340)="fd25d10e15969cf09d620cc840b76929b11832c4e9570a3d4ad3939c246f", 0x1}, {0x800, 0x7b, &(0x7f00000004c0)="f1f722a9d23f0356678f2fe4c0825b6cd7800392830c764ee47271a76bf4a0f71da43aae2abcb79ac8e0a13b7193828c05dfe0c585d2f80445f557c94355bef21e840e6992c11e3052ee07dbc7ad888efb8a9b52ddbe21b71893300758ed241e6db891e7add078b1372a88a5e0fd7f4f52a7642d05fae129e9e9ef", 0x0, 0x1}]}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000004240)={0x2020}, 0x2020) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x5, @mcast1, 0xa4f3}, r4}}, 0x30) lseek(r2, 0x4, 0x1) 01:08:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x29e}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) [ 1508.834965] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:08:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x700000000000000}, 0x0) [ 1508.924052] audit: type=1804 audit(1634692095.803:2138): pid=10189 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/531/bus" dev="sda1" ino=15166 res=1 [ 1508.963160] validate_nla: 8 callbacks suppressed [ 1508.963171] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 01:08:15 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000180)=0x5, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x8) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000200), 0x4) r4 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x200000077, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24008081, &(0x7f0000000140)={0x2, 0x4e24, @remote}, 0x10) dup2(r3, r4) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000380)) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x9, 0x8000) sendfile(r2, r5, &(0x7f0000000140)=0x1, 0xc639) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) [ 1509.046354] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1509.068567] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 1509.109529] audit: type=1804 audit(1634692095.803:2139): pid=10188 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/531/bus" dev="sda1" ino=15166 res=1 01:08:16 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x60}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1509.228463] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1509.236319] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 01:08:16 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x6, @remote, 0x8}, @in6={0xa, 0x4e21, 0x12, @mcast2}}}, 0x118) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f00000005c0)={0x3, &(0x7f0000000540)=[{0x1, 0xe9, &(0x7f00000003c0)="f188a85882dbbf00e4210365bd6522dad1d05e657d1e058eb279f2dd65531b8ca4010daaf9c3ba60d578ce5e26cbe262ef24255f1bb25b7010f643e7b2c02d4e47fc20b14689776d7787186161084df0494908342706aac18587c9b7e10e108f31f477aa3bbbc0a88e3813d02b1c5466966713729970d5a198d8828d2672d0f962b44c4bc2f117898f77703750601349601198747f7793f727a613b9bf7aea7450211c15316e8574a182c0c2f9e6c89218c40e7b8356775f545b4ecffc293fd2fe4be556791be2144e87daa97629e0a8622c7fa68d42525d696d71954bee5a57ba50ff3f2a00b99830", 0x1, 0x1}, {0x8, 0x1e, &(0x7f0000000340)="fd25d10e15969cf09d620cc840b76929b11832c4e9570a3d4ad3939c246f", 0x1}, {0x800, 0x7b, &(0x7f00000004c0)="f1f722a9d23f0356678f2fe4c0825b6cd7800392830c764ee47271a76bf4a0f71da43aae2abcb79ac8e0a13b7193828c05dfe0c585d2f80445f557c94355bef21e840e6992c11e3052ee07dbc7ad888efb8a9b52ddbe21b71893300758ed241e6db891e7add078b1372a88a5e0fd7f4f52a7642d05fae129e9e9ef", 0x0, 0x1}]}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000004240)={0x2020}, 0x2020) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x5, @mcast1, 0xa4f3}, r4}}, 0x30) 01:08:16 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0xfc}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1509.641430] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de 01:08:16 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x6, @remote, 0x8}, @in6={0xa, 0x4e21, 0x12, @mcast2}}}, 0x118) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f00000005c0)={0x3, &(0x7f0000000540)=[{0x1, 0xe9, &(0x7f00000003c0)="f188a85882dbbf00e4210365bd6522dad1d05e657d1e058eb279f2dd65531b8ca4010daaf9c3ba60d578ce5e26cbe262ef24255f1bb25b7010f643e7b2c02d4e47fc20b14689776d7787186161084df0494908342706aac18587c9b7e10e108f31f477aa3bbbc0a88e3813d02b1c5466966713729970d5a198d8828d2672d0f962b44c4bc2f117898f77703750601349601198747f7793f727a613b9bf7aea7450211c15316e8574a182c0c2f9e6c89218c40e7b8356775f545b4ecffc293fd2fe4be556791be2144e87daa97629e0a8622c7fa68d42525d696d71954bee5a57ba50ff3f2a00b99830", 0x1, 0x1}, {0x8, 0x1e, &(0x7f0000000340)="fd25d10e15969cf09d620cc840b76929b11832c4e9570a3d4ad3939c246f", 0x1}, {0x800, 0x7b, &(0x7f00000004c0)="f1f722a9d23f0356678f2fe4c0825b6cd7800392830c764ee47271a76bf4a0f71da43aae2abcb79ac8e0a13b7193828c05dfe0c585d2f80445f557c94355bef21e840e6992c11e3052ee07dbc7ad888efb8a9b52ddbe21b71893300758ed241e6db891e7add078b1372a88a5e0fd7f4f52a7642d05fae129e9e9ef", 0x0, 0x1}]}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000004240)={0x2020}, 0x2020) openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280), 0x0, 0x1}}, 0x20) 01:08:16 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x700}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1510.294665] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de 01:08:17 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x6, @remote, 0x8}, @in6={0xa, 0x4e21, 0x12, @mcast2}}}, 0x118) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f00000005c0)={0x3, &(0x7f0000000540)=[{0x1, 0xe9, &(0x7f00000003c0)="f188a85882dbbf00e4210365bd6522dad1d05e657d1e058eb279f2dd65531b8ca4010daaf9c3ba60d578ce5e26cbe262ef24255f1bb25b7010f643e7b2c02d4e47fc20b14689776d7787186161084df0494908342706aac18587c9b7e10e108f31f477aa3bbbc0a88e3813d02b1c5466966713729970d5a198d8828d2672d0f962b44c4bc2f117898f77703750601349601198747f7793f727a613b9bf7aea7450211c15316e8574a182c0c2f9e6c89218c40e7b8356775f545b4ecffc293fd2fe4be556791be2144e87daa97629e0a8622c7fa68d42525d696d71954bee5a57ba50ff3f2a00b99830", 0x1, 0x1}, {0x8, 0x1e, &(0x7f0000000340)="fd25d10e15969cf09d620cc840b76929b11832c4e9570a3d4ad3939c246f", 0x1}, {0x800, 0x7b, &(0x7f00000004c0)="f1f722a9d23f0356678f2fe4c0825b6cd7800392830c764ee47271a76bf4a0f71da43aae2abcb79ac8e0a13b7193828c05dfe0c585d2f80445f557c94355bef21e840e6992c11e3052ee07dbc7ad888efb8a9b52ddbe21b71893300758ed241e6db891e7add078b1372a88a5e0fd7f4f52a7642d05fae129e9e9ef", 0x0, 0x1}]}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000004240)={0x2020}, 0x2020) openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) [ 1511.056114] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1511.659109] kauditd_printk_skb: 2 callbacks suppressed [ 1511.659205] audit: type=1804 audit(1634692098.543:2142): pid=10218 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/532/bus" dev="sda1" ino=15168 res=1 [ 1511.729912] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1512.808882] device bridge1078 entered promiscuous mode [ 1512.919621] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:08:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x7c02}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:08:19 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x900}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:08:19 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x6, @remote, 0x8}, @in6={0xa, 0x4e21, 0x12, @mcast2}}}, 0x118) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f00000005c0)={0x3, &(0x7f0000000540)=[{0x1, 0xe9, &(0x7f00000003c0)="f188a85882dbbf00e4210365bd6522dad1d05e657d1e058eb279f2dd65531b8ca4010daaf9c3ba60d578ce5e26cbe262ef24255f1bb25b7010f643e7b2c02d4e47fc20b14689776d7787186161084df0494908342706aac18587c9b7e10e108f31f477aa3bbbc0a88e3813d02b1c5466966713729970d5a198d8828d2672d0f962b44c4bc2f117898f77703750601349601198747f7793f727a613b9bf7aea7450211c15316e8574a182c0c2f9e6c89218c40e7b8356775f545b4ecffc293fd2fe4be556791be2144e87daa97629e0a8622c7fa68d42525d696d71954bee5a57ba50ff3f2a00b99830", 0x1, 0x1}, {0x8, 0x1e, &(0x7f0000000340)="fd25d10e15969cf09d620cc840b76929b11832c4e9570a3d4ad3939c246f", 0x1}, {0x800, 0x7b, &(0x7f00000004c0)="f1f722a9d23f0356678f2fe4c0825b6cd7800392830c764ee47271a76bf4a0f71da43aae2abcb79ac8e0a13b7193828c05dfe0c585d2f80445f557c94355bef21e840e6992c11e3052ee07dbc7ad888efb8a9b52ddbe21b71893300758ed241e6db891e7add078b1372a88a5e0fd7f4f52a7642d05fae129e9e9ef", 0x0, 0x1}]}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000004240)={0x2020}, 0x2020) 01:08:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x29e}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:08:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x800000000000000}, 0x0) 01:08:19 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = getpgid(0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000140)={0x0, 0x0, {0x2, 0x3, 0x300a, 0xb, 0x4, 0x3, 0x1, 0x6}}) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xfff}, 0x0, 0x1000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x5, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x10010, 0xffffffffffffffff, 0x6433000) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r4, 0x20, 0x0, 0xfffffeff000) fallocate(r4, 0x6, 0xffffffffffffffff, 0x10000101) [ 1513.097274] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1513.107729] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 01:08:20 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0xe00}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1513.148972] netlink: 'syz-executor.2': attribute type 39 has an invalid length. 01:08:20 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x6, @remote, 0x8}, @in6={0xa, 0x4e21, 0x12, @mcast2}}}, 0x118) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f00000005c0)={0x3, &(0x7f0000000540)=[{0x1, 0xe9, &(0x7f00000003c0)="f188a85882dbbf00e4210365bd6522dad1d05e657d1e058eb279f2dd65531b8ca4010daaf9c3ba60d578ce5e26cbe262ef24255f1bb25b7010f643e7b2c02d4e47fc20b14689776d7787186161084df0494908342706aac18587c9b7e10e108f31f477aa3bbbc0a88e3813d02b1c5466966713729970d5a198d8828d2672d0f962b44c4bc2f117898f77703750601349601198747f7793f727a613b9bf7aea7450211c15316e8574a182c0c2f9e6c89218c40e7b8356775f545b4ecffc293fd2fe4be556791be2144e87daa97629e0a8622c7fa68d42525d696d71954bee5a57ba50ff3f2a00b99830", 0x1, 0x1}, {0x8, 0x1e, &(0x7f0000000340)="fd25d10e15969cf09d620cc840b76929b11832c4e9570a3d4ad3939c246f", 0x1}, {0x800, 0x7b, &(0x7f00000004c0)="f1f722a9d23f0356678f2fe4c0825b6cd7800392830c764ee47271a76bf4a0f71da43aae2abcb79ac8e0a13b7193828c05dfe0c585d2f80445f557c94355bef21e840e6992c11e3052ee07dbc7ad888efb8a9b52ddbe21b71893300758ed241e6db891e7add078b1372a88a5e0fd7f4f52a7642d05fae129e9e9ef", 0x0, 0x1}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) [ 1513.257618] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1513.288462] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1513.322797] audit: type=1804 audit(1634692100.204:2143): pid=10298 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/533/bus" dev="sda1" ino=14258 res=1 [ 1513.379506] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1513.452140] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:08:20 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x224e}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1513.499849] audit: type=1804 audit(1634692100.384:2144): pid=10313 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir293481889/syzkaller.PRKuda/533/bus" dev="sda1" ino=14258 res=1 01:08:20 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x6, @remote, 0x8}, @in6={0xa, 0x4e21, 0x12, @mcast2}}}, 0x118) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f00000005c0)={0x3, &(0x7f0000000540)=[{0x1, 0xe9, &(0x7f00000003c0)="f188a85882dbbf00e4210365bd6522dad1d05e657d1e058eb279f2dd65531b8ca4010daaf9c3ba60d578ce5e26cbe262ef24255f1bb25b7010f643e7b2c02d4e47fc20b14689776d7787186161084df0494908342706aac18587c9b7e10e108f31f477aa3bbbc0a88e3813d02b1c5466966713729970d5a198d8828d2672d0f962b44c4bc2f117898f77703750601349601198747f7793f727a613b9bf7aea7450211c15316e8574a182c0c2f9e6c89218c40e7b8356775f545b4ecffc293fd2fe4be556791be2144e87daa97629e0a8622c7fa68d42525d696d71954bee5a57ba50ff3f2a00b99830", 0x1, 0x1}, {0x8, 0x1e, &(0x7f0000000340)="fd25d10e15969cf09d620cc840b76929b11832c4e9570a3d4ad3939c246f", 0x1}, {0x800, 0x7b, &(0x7f00000004c0)="f1f722a9d23f0356678f2fe4c0825b6cd7800392830c764ee47271a76bf4a0f71da43aae2abcb79ac8e0a13b7193828c05dfe0c585d2f80445f557c94355bef21e840e6992c11e3052ee07dbc7ad888efb8a9b52ddbe21b71893300758ed241e6db891e7add078b1372a88a5e0fd7f4f52a7642d05fae129e9e9ef", 0x0, 0x1}]}) 01:08:20 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x3f00}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 1513.646081] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de 01:08:21 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x6, @remote, 0x8}, @in6={0xa, 0x4e21, 0x12, @mcast2}}}, 0x118) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) [ 1514.868587] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1518.103222] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:08:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x7e02}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:08:25 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x4800}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 01:08:25 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x6, @remote, 0x8}, @in6={0xa, 0x4e21, 0x12, @mcast2}}}, 0x118) connect$ax25(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 01:08:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070000000000080027"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x29e}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}}, 0x0) 01:08:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x900000000000000}, 0x0) [ 1518.419648] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1518.485809] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1518.942288] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1519.280683] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 1519.316492] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 1521.653045] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1542.991003] watchdog: BUG: soft lockup - CPU#1 stuck for 24s! [syz-executor.5:10294] [ 1542.998918] Modules linked in: [ 1543.002107] irq event stamp: 3501453 [ 1543.005825] hardirqs last enabled at (3501452): [] _raw_spin_unlock_irq+0x24/0x80 [ 1543.015096] hardirqs last disabled at (3501453): [] trace_hardirqs_off_thunk+0x1a/0x1c [ 1543.024714] softirqs last enabled at (3498126): [] __do_softirq+0x678/0x980 [ 1543.033461] softirqs last disabled at (3498129): [] irq_exit+0x215/0x260 [ 1543.042642] CPU: 1 PID: 10294 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 [ 1543.050515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1543.059871] RIP: 0010:_raw_spin_unlock_irq+0x50/0x80 [ 1543.064972] Code: c0 98 82 f1 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 31 48 83 3d 01 31 d8 01 00 74 25 fb 66 0f 1f 44 00 00 01 00 00 00 e8 26 1b 28 f9 65 8b 05 9f 8d e8 77 85 c0 74 02 5d [ 1543.083875] RSP: 0000:ffff8880ba107de0 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 1543.091584] RAX: 1ffffffff13e3053 RBX: dffffc0000000000 RCX: 1ffff1101278bd65 [ 1543.098850] RDX: dffffc0000000000 RSI: ffff888093c5eb30 RDI: ffff888093c5eb04 [ 1543.106115] RBP: ffff8880ba122b40 R08: 0000000000000000 R09: 0000000000000000 [ 1543.113380] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff869a4ab0 [ 1543.120656] R13: ffff8880ba122b40 R14: ffff8880ba107e78 R15: 0000000000000000 [ 1543.128017] FS: 00005555557b4400(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 [ 1543.136239] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1543.142112] CR2: 0000001b3152b000 CR3: 0000000009e6d000 CR4: 00000000003426e0 [ 1543.149378] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1543.156645] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 1543.163911] Call Trace: [ 1543.166488] [ 1543.168648] expire_timers+0x238/0x4e0 [ 1543.172549] run_timer_softirq+0x21c/0x670 [ 1543.176787] ? expire_timers+0x4e0/0x4e0 [ 1543.180849] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1543.185974] ? mac80211_hwsim_beacon+0x150/0x190 [ 1543.190731] ? check_preemption_disabled+0x41/0x280 [ 1543.195753] __do_softirq+0x265/0x980 [ 1543.199577] irq_exit+0x215/0x260 [ 1543.203029] smp_apic_timer_interrupt+0x136/0x550 [ 1543.207874] apic_timer_interrupt+0xf/0x20 [ 1543.212099] [ 1543.214347] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x50 [ 1543.219712] Code: ff 48 89 df e8 11 dd 35 00 e9 ab fe ff ff 4c 89 ef e8 04 dd 35 00 e9 23 fe ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <48> 8b 34 24 65 48 8b 04 25 c0 df 01 00 65 8b 15 cc 59 9f 7e 81 e2 [ 1543.238608] RSP: 0000:ffff88821f18f700 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 1543.246310] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff818fb155 [ 1543.253575] RDX: 0000000000000000 RSI: ffff888093c5e280 RDI: 0000000000000001 [ 1543.260846] RBP: ffffea0000466f40 R08: 0000000000000001 R09: 0000000000000000 [ 1543.268114] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 1543.275379] R13: 0000000000000000 R14: ffffea0000466f40 R15: 00007fb35b769000 [ 1543.282684] ? page_remove_file_rmap+0xa5/0xa30 [ 1543.287357] page_remove_file_rmap+0x6a/0xa30 [ 1543.291851] page_remove_rmap+0xe5/0x120 [ 1543.295914] unmap_page_range+0x147d/0x2c50 [ 1543.300257] ? vm_normal_page_pmd+0x4c0/0x4c0 [ 1543.304754] ? uprobe_munmap+0x2d/0x4d0 [ 1543.308755] unmap_single_vma+0x198/0x300 [ 1543.312911] unmap_vmas+0xa9/0x180 [ 1543.316451] exit_mmap+0x2b9/0x530 [ 1543.319993] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 1543.325271] ? __khugepaged_exit+0x2a5/0x3e0 [ 1543.329688] ? __khugepaged_exit+0x2a6/0x3e0 [ 1543.334094] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1543.339109] ? kmem_cache_free+0x226/0x260 [ 1543.343345] ? __khugepaged_exit+0x2c7/0x3e0 [ 1543.347758] mmput+0x14e/0x4a0 [ 1543.350951] do_exit+0xaec/0x2be0 [ 1543.354408] ? HARDIRQ_verbose+0x10/0x10 [ 1543.358468] ? mm_update_next_owner+0x650/0x650 [ 1543.363139] ? get_signal+0x388/0x1f70 [ 1543.367035] ? lock_downgrade+0x720/0x720 [ 1543.371184] ? lock_acquire+0x170/0x3c0 [ 1543.375161] do_group_exit+0x125/0x310 [ 1543.379049] get_signal+0x3f2/0x1f70 [ 1543.382777] do_signal+0x8f/0x1670 [ 1543.386321] ? setup_sigcontext+0x820/0x820 [ 1543.390643] ? _raw_spin_unlock_irq+0x50/0x80 [ 1543.395141] ? finish_task_switch+0x1db/0x760 [ 1543.399642] ? __schedule+0x88f/0x2040 [ 1543.403532] ? io_schedule_timeout+0x140/0x140 [ 1543.408111] ? up_read+0x17/0x110 [ 1543.411575] exit_to_usermode_loop+0x204/0x2a0 [ 1543.416160] prepare_exit_to_usermode+0x277/0x2d0 [ 1543.421004] retint_user+0x8/0x18 [ 1543.424458] RIP: 0033:0x7fb35d73fab6 [ 1543.428172] Code: Bad RIP value. [ 1543.431531] RSP: 002b:00007fff829ad2e0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 1543.439235] RAX: 000000002df37860 RBX: 00007fb35d509008 RCX: 0000001b31520000 [ 1543.446498] RDX: 0000001b3152bf1c RSI: ffffffff81b09c4a RDI: 000000000000b37a [ 1543.453762] RBP: 0000000000000001 R08: 0000000081b09c4a R09: 0000001b31529574 [ 1543.461028] R10: ffffffff81b09beb R11: 000000002df37862 R12: 000000000000b37a [ 1543.468292] R13: 00007fb35d889000 R14: ffffffff81b09c4a R15: 00007fb35d894ff0 [ 1543.475568] ? create_empty_buffers+0x49a/0x760 [ 1543.480237] ? create_empty_buffers+0x43b/0x760 [ 1543.484908] ? create_empty_buffers+0x49a/0x760 [ 1543.489576] Sending NMI from CPU 1 to CPUs 0: [ 1543.494641] NMI backtrace for cpu 0 [ 1543.494647] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.19.211-syzkaller #0 [ 1543.494653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1543.494658] RIP: 0010:check_memory_region+0xb1/0x170 [ 1543.494669] Code: 08 48 39 d0 74 7b 48 83 38 00 74 f1 48 8d 50 08 eb 09 48 83 c0 01 48 39 d0 74 0e 80 38 00 74 f2 48 85 c0 0f 85 9c 00 00 00 5b <5d> 41 5c c3 48 85 d2 74 f6 48 01 ea eb 09 48 83 c0 01 48 39 d0 74 [ 1543.494673] RSP: 0018:ffff8880ba007a68 EFLAGS: 00000046 [ 1543.494681] RAX: fffffbfff19abed8 RBX: 0000000000000000 RCX: ffffffff814afa31 [ 1543.494686] RDX: fffffbfff19abed8 RSI: 0000000000000004 RDI: ffffffff8cd5f6b8 [ 1543.494692] RBP: fffffbfff19abed7 R08: 0000000000000001 R09: fffffbfff19abed7 [ 1543.494697] R10: ffffffff8cd5f6bb R11: ffffffff8c66501b R12: 0000000000000001 [ 1543.494702] R13: ffffffff89e78080 R14: ffffffff8d3cd7a0 R15: 0000000000000001 [ 1543.494707] FS: 0000000000000000(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 [ 1543.494712] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1543.494717] CR2: 000000c00064c78c CR3: 000000009b265000 CR4: 00000000003426f0 [ 1543.494722] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1543.494727] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1543.494730] Call Trace: [ 1543.494733] [ 1543.494736] __lock_acquire+0x251/0x3ff0 [ 1543.494740] ? perf_swevent_hrtimer+0x318/0x3e0 [ 1543.494744] ? mark_held_locks+0xf0/0xf0 [ 1543.494748] ? perf_trace_lock_acquire+0xef/0x530 [ 1543.494752] ? HARDIRQ_verbose+0x10/0x10 [ 1543.494755] lock_acquire+0x170/0x3c0 [ 1543.494759] ? debug_object_activate+0x12f/0x450 [ 1543.494763] _raw_spin_lock_irqsave+0x8c/0xc0 [ 1543.494767] ? debug_object_activate+0x12f/0x450 [ 1543.494771] debug_object_activate+0x12f/0x450 [ 1543.494775] ? debug_object_assert_init+0x2e0/0x2e0 [ 1543.494779] ? __hrtimer_run_queues+0x397/0xe60 [ 1543.494783] ? lock_acquire+0x170/0x3c0 [ 1543.494786] ? __hrtimer_run_queues+0x45d/0xe60 [ 1543.494790] enqueue_hrtimer+0x27/0x3d0 [ 1543.494794] __hrtimer_run_queues+0xae6/0xe60 [ 1543.494798] ? hrtimer_fixup_free+0xa0/0xa0 [ 1543.494801] ? kvm_clock_get_cycles+0x14/0x30 [ 1543.494806] ? ktime_get_update_offsets_now+0x2ec/0x460 [ 1543.494809] hrtimer_interrupt+0x326/0x9e0 [ 1543.494813] smp_apic_timer_interrupt+0x10c/0x550 [ 1543.494817] apic_timer_interrupt+0xf/0x20 [ 1543.494820] [ 1543.494823] RIP: 0010:native_safe_halt+0xe/0x10 [ 1543.494834] Code: 48 89 df e8 f4 20 7f f9 e9 2e ff ff ff 48 89 df e8 e7 20 7f f9 eb 82 90 90 90 90 90 e9 07 00 00 00 0f 00 2d 14 43 4e 00 fb f4 90 e9 07 00 00 00 0f 00 2d 04 43 4e 00 f4 c3 90 90 41 56 41 55 [ 1543.494838] RSP: 0018:ffffffff89e07d40 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 1543.494847] RAX: 1ffffffff13e3054 RBX: dffffc0000000000 RCX: 0000000000000000 [ 1543.494852] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffffffff89e78904 [ 1543.494858] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1543.494863] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff89f18290 [ 1543.494868] R13: 1ffffffff13c0fb2 R14: 0000000000000000 R15: 0000000000000000 [ 1543.494871] default_idle+0x49/0x310 [ 1543.494875] do_idle+0x2ec/0x4b0 [ 1543.494879] ? arch_cpu_idle_exit+0x70/0x70 [ 1543.494882] ? finish_task_switch+0x1db/0x760 [ 1543.494886] cpu_startup_entry+0xc5/0xe0 [ 1543.494889] ? cpu_in_idle+0x20/0x20 [ 1543.494893] ? preempt_count_add+0xaf/0x190 [ 1543.494898] ? trace_event_define_fields_vector_free_moved+0xab/0xab [ 1543.494902] start_kernel+0x8d6/0x911 [ 1543.494905] ? mem_encrypt_init+0x5/0x5 [ 1543.494909] ? load_ucode_bsp+0x239/0x279 [ 1543.494913] secondary_startup_64+0xa4/0xb0 [ 1543.495090] Kernel panic - not syncing: softlockup: hung tasks [ 1543.845286] CPU: 1 PID: 10294 Comm: syz-executor.5 Tainted: G L 4.19.211-syzkaller #0 [ 1543.854547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1543.863890] Call Trace: [ 1543.866472] [ 1543.868626] dump_stack+0x1fc/0x2ef [ 1543.872258] panic+0x26a/0x50e [ 1543.875447] ? __warn_printk+0xf3/0xf3 [ 1543.879338] ? cpumask_next+0x3c/0x40 [ 1543.883135] ? printk_safe_flush+0xd6/0x120 [ 1543.887457] ? watchdog_timer_fn.cold+0x5/0x25 [ 1543.892038] ? watchdog_timer_fn+0x53e/0x580 [ 1543.896455] watchdog_timer_fn.cold+0x16/0x25 [ 1543.900963] __hrtimer_run_queues+0x3f6/0xe60 [ 1543.905460] ? softlockup_fn+0xb0/0xb0 [ 1543.909356] ? hrtimer_fixup_free+0xa0/0xa0 [ 1543.913679] ? kvm_clock_get_cycles+0x14/0x30 [ 1543.918170] ? ktime_get_update_offsets_now+0x2ec/0x460 [ 1543.923540] hrtimer_interrupt+0x326/0x9e0 [ 1543.927790] smp_apic_timer_interrupt+0x10c/0x550 [ 1543.932633] apic_timer_interrupt+0xf/0x20 [ 1543.936865] RIP: 0010:_raw_spin_unlock_irq+0x50/0x80 [ 1543.941968] Code: c0 98 82 f1 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 31 48 83 3d 01 31 d8 01 00 74 25 fb 66 0f 1f 44 00 00 01 00 00 00 e8 26 1b 28 f9 65 8b 05 9f 8d e8 77 85 c0 74 02 5d [ 1543.960877] RSP: 0000:ffff8880ba107de0 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 1543.968586] RAX: 1ffffffff13e3053 RBX: dffffc0000000000 RCX: 1ffff1101278bd65 [ 1543.975853] RDX: dffffc0000000000 RSI: ffff888093c5eb30 RDI: ffff888093c5eb04 [ 1543.983125] RBP: ffff8880ba122b40 R08: 0000000000000000 R09: 0000000000000000 [ 1543.990400] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff869a4ab0 [ 1543.997680] R13: ffff8880ba122b40 R14: ffff8880ba107e78 R15: 0000000000000000 [ 1544.004963] ? apic_timer_interrupt+0xa/0x20 [ 1544.009379] ? pie_init+0x3c0/0x3c0 [ 1544.013026] expire_timers+0x238/0x4e0 [ 1544.016924] run_timer_softirq+0x21c/0x670 [ 1544.021159] ? expire_timers+0x4e0/0x4e0 [ 1544.025220] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1544.030324] ? mac80211_hwsim_beacon+0x150/0x190 [ 1544.035091] ? check_preemption_disabled+0x41/0x280 [ 1544.040112] __do_softirq+0x265/0x980 [ 1544.043922] irq_exit+0x215/0x260 [ 1544.047371] smp_apic_timer_interrupt+0x136/0x550 [ 1544.052220] apic_timer_interrupt+0xf/0x20 [ 1544.056482] [ 1544.058720] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x50 [ 1544.064085] Code: ff 48 89 df e8 11 dd 35 00 e9 ab fe ff ff 4c 89 ef e8 04 dd 35 00 e9 23 fe ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <48> 8b 34 24 65 48 8b 04 25 c0 df 01 00 65 8b 15 cc 59 9f 7e 81 e2 [ 1544.082984] RSP: 0000:ffff88821f18f700 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 1544.090698] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff818fb155 [ 1544.097967] RDX: 0000000000000000 RSI: ffff888093c5e280 RDI: 0000000000000001 [ 1544.105237] RBP: ffffea0000466f40 R08: 0000000000000001 R09: 0000000000000000 [ 1544.112501] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 1544.119764] R13: 0000000000000000 R14: ffffea0000466f40 R15: 00007fb35b769000 [ 1544.127048] ? page_remove_file_rmap+0xa5/0xa30 [ 1544.131726] page_remove_file_rmap+0x6a/0xa30 [ 1544.136222] page_remove_rmap+0xe5/0x120 [ 1544.140300] unmap_page_range+0x147d/0x2c50 [ 1544.144661] ? vm_normal_page_pmd+0x4c0/0x4c0 [ 1544.149162] ? uprobe_munmap+0x2d/0x4d0 [ 1544.153147] unmap_single_vma+0x198/0x300 [ 1544.157307] unmap_vmas+0xa9/0x180 [ 1544.160853] exit_mmap+0x2b9/0x530 [ 1544.164394] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 1544.169671] ? __khugepaged_exit+0x2a5/0x3e0 [ 1544.174094] ? __khugepaged_exit+0x2a6/0x3e0 [ 1544.178498] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1544.183513] ? kmem_cache_free+0x226/0x260 [ 1544.187759] ? __khugepaged_exit+0x2c7/0x3e0 [ 1544.192171] mmput+0x14e/0x4a0 [ 1544.195363] do_exit+0xaec/0x2be0 [ 1544.198825] ? HARDIRQ_verbose+0x10/0x10 [ 1544.202888] ? mm_update_next_owner+0x650/0x650 [ 1544.207559] ? get_signal+0x388/0x1f70 [ 1544.211454] ? lock_downgrade+0x720/0x720 [ 1544.215600] ? lock_acquire+0x170/0x3c0 [ 1544.219576] do_group_exit+0x125/0x310 [ 1544.223464] get_signal+0x3f2/0x1f70 [ 1544.227196] do_signal+0x8f/0x1670 [ 1544.230742] ? setup_sigcontext+0x820/0x820 [ 1544.235066] ? _raw_spin_unlock_irq+0x50/0x80 [ 1544.239567] ? finish_task_switch+0x1db/0x760 [ 1544.244062] ? __schedule+0x88f/0x2040 [ 1544.247956] ? io_schedule_timeout+0x140/0x140 [ 1544.252538] ? up_read+0x17/0x110 [ 1544.256004] exit_to_usermode_loop+0x204/0x2a0 [ 1544.260586] prepare_exit_to_usermode+0x277/0x2d0 [ 1544.265427] retint_user+0x8/0x18 [ 1544.268876] RIP: 0033:0x7fb35d73fab6 [ 1544.272590] Code: Bad RIP value. [ 1544.275947] RSP: 002b:00007fff829ad2e0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 1544.283647] RAX: 000000002df37860 RBX: 00007fb35d509008 RCX: 0000001b31520000 [ 1544.290916] RDX: 0000001b3152bf1c RSI: ffffffff81b09c4a RDI: 000000000000b37a [ 1544.298189] RBP: 0000000000000001 R08: 0000000081b09c4a R09: 0000001b31529574 [ 1544.305456] R10: ffffffff81b09beb R11: 000000002df37862 R12: 000000000000b37a [ 1544.312726] R13: 00007fb35d889000 R14: ffffffff81b09c4a R15: 00007fb35d894ff0 [ 1544.320001] ? create_empty_buffers+0x49a/0x760 [ 1544.324674] ? create_empty_buffers+0x43b/0x760 [ 1544.329346] ? create_empty_buffers+0x49a/0x760 [ 1544.334555] Kernel Offset: disabled [ 1544.338185] Rebooting in 86400 seconds..