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"}) 01:10:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000000000fffffff0000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc020660b, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1}]}) 01:10:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) [ 3396.089454][T28312] validate_nla: 53 callbacks suppressed [ 3396.089464][T28312] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3396.115621][T28313] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:10:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc028ae92, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1}]}) 01:10:29 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x2a, 0x80000, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r2, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x70, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r3, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x84, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nr0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x40010) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) [ 3396.220974][T28312] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3396.250014][T28313] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:10:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000000000000003f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc080aebe, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1}]}) [ 3396.489254][T28357] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3396.539981][T28357] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:10:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x3, 0x0, [{0x40000001, 0x8}, {0x1}]}) [ 3396.591309][T28360] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:10:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) [ 3396.738619][T28360] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 3396.954341][T28396] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3397.027414][T28396] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:10:30 executing program 2: getpid() socket$kcm(0x29, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x81, 0x2, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff, 0x4, @perf_config_ext={0x5, 0xffffffff}, 0x0, 0x0, 0xc613, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x1, r0, 0x3) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r1, 0x0, 0x60) openat$cgroup_ro(r0, &(0x7f0000000100)='memory.current\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x7000000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf086dd1fffffff0e003300630277fbac14140ce0", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a}, 0x28) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) bind$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000040)={0x11}) 01:10:30 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000dd4000/0x4000)=nil, 0x4000, 0x800002, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff54) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x1f, 0x5e6b, 0xcf, 0x3f, 0x3, 0x1f, 0x28}, 0xc) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:10:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x4, 0x0, [{0x40000001, 0x8}, {0x1}]}) 01:10:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000000000000003fa000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x7, 0x0, [{0x40000001, 0x8}, {0x1}]}) 01:10:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700ffc00033ffffc3fc000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) syz_init_net_socket$ax25(0x3, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) socket(0x0, 0x0, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000080)=[{}, {}, {}], 0x3, 0x2) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000000)=0x8000, 0x4) bind(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) shutdown(r1, 0x1) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x88493c4140854681, 0x0, 0x0, 0x0) [ 3398.141021][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 01:10:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:31 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none}, 0xa) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000180)={0x15, 0x110, 0xfa00, {r4, 0x4, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x82be, @mcast2}, @ib={0x1b, 0x7f, 0x1, {"bd8327fcc3505cab6dfcf6ddf5009129"}, 0x907, 0x6, 0x10000000}}}, 0x118) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:10:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x15, 0x0, [{0x40000001, 0x8}, {0x1}]}) 01:10:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700fffffff3ffffc3fc000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad0002000000000000060400000000000000ff", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x50, 0x0, [{0x40000001, 0x8}, {0x1}]}) 01:10:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000000000000000fe000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad0002000000000000060400000000000000ff", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1}]}) 01:10:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad0002000000000000060400000000000000ff", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000000000000fffe000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:32 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000dd4000/0x4000)=nil, 0x4000, 0x800002, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff54) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x1f, 0x5e6b, 0xcf, 0x3f, 0x3, 0x1f, 0x28}, 0xc) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:10:32 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x2b56, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) 01:10:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x2, [{0x40000001, 0x8}, {0x1}]}) 01:10:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad0002000000000000060400000000000000ff", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000000000fffffffe000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x3, [{0x40000001, 0x8}, {0x1}]}) 01:10:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000088", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x4, [{0x40000001, 0x8}, {0x1}]}) 01:10:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000000000000fff000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:33 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x3, 0x2, 0x3, {0xa, 0x4e23, 0x1, @loopback, 0x200}}}, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x10001, @mcast2, 0xa}, 0x1c) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x5e5c2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup3(r2, r2, 0x0) r4 = dup(r3) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f00000002c0)) bind$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="d6a360741000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffff80000000002b000100686673630000000008000279ab8a2165439cbe3e8508ab38c1107febeecc568574d7249628344a92"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x34, 0x64, 0xd27, 0x0, 0x0, {}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x50, 0x12, 0x100, 0x70bd28, 0x25dfdbff, {0x9, 0x8, 0x81, 0x1, {0x4e22, 0x4e24, [0x1f, 0x2, 0x7, 0x9], [0x4, 0x9, 0xfffffffb, 0x10000], 0x0, [0x3f, 0x4954]}, 0x400, 0x1f}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40801}, 0x8000) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) 01:10:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x5, [{0x40000001, 0x8}, {0x1}]}) 01:10:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000000000000604000000000000009e", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:33 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x422100, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000000040)={0x200000000000000, 0x6}) syz_open_procfs$namespace(0x0, 0xffffffffffffffff) 01:10:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x6, [{0x40000001, 0x8}, {0x1}]}) 01:10:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad0002000000000000060400000000000000f0", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000000000007fff000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad0002000000000000060400000000000000fc", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='veth0_macvtap\x00', 0x10) sendto$inet(r3, &(0x7f0000000000), 0xfffffffffffffccf, 0x5000000000000, 0x0, 0xffffffffffffff37) 01:10:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x7, [{0x40000001, 0x8}, {0x1}]}) 01:10:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700fcc3ffff3300c0ff000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad0002000000000000060400000000000000ff", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x300, [{0x40000001, 0x8}, {0x1}]}) 01:10:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x500, [{0x40000001, 0x8}, {0x1}]}) [ 3401.126930][T28697] validate_nla: 45 callbacks suppressed [ 3401.126939][T28697] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3401.200640][T28693] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:10:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x600, [{0x40000001, 0x8}, {0x1}]}) [ 3401.297843][T28697] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:10:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000000000003ffff000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='veth0_macvtap\x00', 0x10) sendto$inet(r3, &(0x7f0000000000), 0xfffffffffffffccf, 0x5000000000000, 0x0, 0xffffffffffffff37) [ 3401.441297][T28725] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3401.482260][T28729] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:10:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x700, [{0x40000001, 0x8}, {0x1}]}) [ 3401.570814][T28725] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3401.617530][T28729] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:10:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x3f00, [{0x40000001, 0x8}, {0x1}]}) 01:10:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000000007fffffff000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3401.838506][T28759] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3401.907966][T28759] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3401.988304][T28767] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:10:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x80ffff, [{0x40000001, 0x8}, {0x1}]}) 01:10:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700fcc3fffff3ffffff000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x1000000, [{0x40000001, 0x8}, {0x1}]}) 01:10:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='veth0_macvtap\x00', 0x10) sendto$inet(r3, &(0x7f0000000000), 0xfffffffffffffccf, 0x5000000000000, 0x0, 0xffffffffffffff37) 01:10:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000000000ffffffff000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x2000000, [{0x40000001, 0x8}, {0x1}]}) 01:10:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x3000000, [{0x40000001, 0x8}, {0x1}]}) 01:10:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000004088ffffffff000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x4000000, [{0x40000001, 0x8}, {0x1}]}) 01:10:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000f0ffffffffffff000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000002c0)=ANY=[@ANYBLOB="f7f1"]) pipe(&(0x7f0000000300)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x23c, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x298) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0x2, {0x0, @local}}, 0x1e) 01:10:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x5000000, [{0x40000001, 0x8}, {0x1}]}) 01:10:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700ffffffffffffffff000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x6000000, [{0x40000001, 0x8}, {0x1}]}) 01:10:37 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) bind$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000040)={0xf9, 0x8, 0x3, 0x621, 0x9}) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0xbf, 0x0, 0x0, 0x0, @time={0x1c, 0x1}, {0x20}, {0x7}, @quote={{0xfd}, 0x3}}], 0x1c) r4 = creat(0x0, 0xe4) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r5, 0x3}) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000100)={r5}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000100)={r5, &(0x7f00000000c0)=""/21}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000000)=ANY=[], &(0x7f0000000140)=0xf5) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0x2, 0x81) 01:10:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x7000000, [{0x40000001, 0x8}, {0x1}]}) 01:10:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x3f000000, [{0x40000001, 0x8}, {0x1}]}) 01:10:38 executing program 2: openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) dup(r0) unshare(0x8000400) r1 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884ee, 0x0, 0x0) dup(r1) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x2, 0x0) pselect6(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r3, r2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000080)={0x3, 'geneve1\x00', {0x8}, 0x8}) 01:10:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000003000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0xfdfdffff, [{0x40000001, 0x8}, {0x1}]}) 01:10:38 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r2}, &(0x7f0000000080)=0x14) r3 = socket(0x2000000000000021, 0x2, 0xab) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000040)={r5}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={r2, 0x100, 0x8, 0x5, 0xff15, 0x7000, 0x4f9, 0x8, {r5, @in={{0x2, 0x4e22, @multicast2}}, 0x9, 0x8, 0x9fe, 0x4c2, 0x401}}, &(0x7f00000000c0)=0xb0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000180)={r6, @in6={{0xa, 0x4e23, 0xdf20, @private2={0xfc, 0x2, [], 0x1}, 0x4}}, 0x40, 0xed, 0x7, 0x7, 0x1}, &(0x7f0000000100)=0x98) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:10:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0xffff8000, [{0x40000001, 0x8}, {0x1}]}) 01:10:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:39 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000ed115d400120021a9bf8000000000000000809040000002e5d8b0099679207fe78d852a06cf94b115ea3780a48a3618bf5d87f8fabf71527306280cde3b93f12a3c9fc854bd4cc12f9f4b48a98825a9acd4c02e3bc1434c3e1d489954a60302a8177b4303143d47d5a7e"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0x13, 0x6, @dev={[], 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = dup(r1) bind$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000180)=ANY=[@ANYBLOB="55d2000000000000ee2cb42bccc2f6dc7908fa3e7ab25d589bac7b3160d09d1d937cfe567ea2d7b65396bb85599aab22cd6b4e507a544db5e988ebe9af4e69ff5d03395076a7f8f972e01792602f2e48d0ef8931f2c2e0d68fb2c7f0fa89b2d6594d74ec9b2f0b74f5aab4236eeb480446a01581c64365d31aced818a8471aadb7c2f3c3beedd57cf71ae41dba934443435805000000000000000901b45b"]) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) bind$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$KVM_DEASSIGN_DEV_IRQ(r4, 0x4040ae75, &(0x7f00000000c0)={0x2, 0x0, 0xffffffff, 0x2}) 01:10:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) [ 3406.189359][T29035] validate_nla: 40 callbacks suppressed [ 3406.189368][T29035] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:10:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0xfffffdfd, [{0x40000001, 0x8}, {0x1}]}) [ 3406.292234][T29025] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 3406.358567][T29035] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:10:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3406.433604][ T2519] usb 3-1: new high-speed USB device number 29 using dummy_hcd 01:10:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x7, 0x8}, {0x1}]}) [ 3406.557924][T29053] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 3406.605928][T29054] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3406.628766][T29053] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 3406.694821][T29054] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3406.725394][ T2519] usb 3-1: no configurations [ 3406.730235][ T2519] usb 3-1: can't read configurations, error -22 01:10:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000006000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3406.912637][T29081] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3406.915151][ T2519] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 3406.956551][T29082] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 3407.041423][T29081] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3407.246154][ T2519] usb 3-1: no configurations [ 3407.250896][ T2519] usb 3-1: can't read configurations, error -22 [ 3407.276860][ T2519] usb usb3-port1: attempt power cycle 01:10:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000007000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xa, 0x8}, {0x1}]}) 01:10:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:40 executing program 0: r0 = socket(0x2, 0xa, 0x8) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) connect$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x2, @empty}}, 0x1e) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000790001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x34, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x460, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x408, 0x8, 0x0, 0x1, [{0x3f8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g='\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik'}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @broadcast}}, @WGPEER_A_ALLOWEDIPS={0x398, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, [], 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @broadcast}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3f}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9ca2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x460}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) [ 3408.004994][ T2519] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 3408.135647][ T2519] usb 3-1: no configurations [ 3408.140277][ T2519] usb 3-1: can't read configurations, error -22 [ 3408.324782][ T2519] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 3408.485218][ T2519] usb 3-1: no configurations [ 3408.489857][ T2519] usb 3-1: can't read configurations, error -22 [ 3408.521668][ T2519] usb usb3-port1: unable to enumerate USB device 01:10:42 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r2}, &(0x7f0000000080)=0x14) r3 = socket(0x2000000000000021, 0x2, 0xab) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000040)={r5}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={r2, 0x100, 0x8, 0x5, 0xff15, 0x7000, 0x4f9, 0x8, {r5, @in={{0x2, 0x4e22, @multicast2}}, 0x9, 0x8, 0x9fe, 0x4c2, 0x401}}, &(0x7f00000000c0)=0xb0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000180)={r6, @in6={{0xa, 0x4e23, 0xdf20, @private2={0xfc, 0x2, [], 0x1}, 0x4}}, 0x40, 0xed, 0x7, 0x7, 0x1}, &(0x7f0000000100)=0x98) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:10:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:10:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000008000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:42 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x80) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x6, 0x80000001, {}, {0xee01}, 0x4, 0x4}) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000040)={{0x2, 0x0, 0x0, r0, 0xee00, 0x8, 0x5}, 0x7, 0x1, 0x20, 0x80000000, r1, r2, 0xe68}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:10:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000002, 0x8}, {0x1}]}) 01:10:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0xf}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000003, 0x8}, {0x1}]}) 01:10:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000a000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:10:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x10}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000005, 0x8}, {0x1}]}) 01:10:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:10:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x3c}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:43 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) socket$can_raw(0x1d, 0x3, 0x1) 01:10:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000c000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000007, 0x8}, {0x1}]}) 01:10:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0xc0}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:10:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x4000000a, 0x8}, {0x1}]}) 01:10:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0xec0}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000e000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:10:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0xfdef}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x4000000d, 0x8}, {0x1}]}) 01:10:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:10:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:10:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000f000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x33fe0}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000015, 0x8}, {0x1}]}) 01:10:45 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r3, r2, 0x0) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000100)=ANY=[@ANYBLOB="bfdf4e8bf9f1c2470792db93b7abc9b92fc725370296626e485948960abf6b7867b92b948d9e9f1ec6f7d368eacdeab7106695c001a6a134f5a39bd57813495d57330cf6b688b72f275091f441d929b5e66ca45e8064d6d400f9a80ee09f2e0fce499b2c6250588ab6cad63de343b3f059ad1b08c879f271e63234b16991e0848bd72678368337e0afba2fe5c0e5c0c581409d12b19c8e75f62bfcbb61", @ANYRESDEC=r2, @ANYRES32=r0, @ANYRES16=r1], &(0x7f0000000040)=0xf5) [ 3412.437970][T29322] validate_nla: 27 callbacks suppressed [ 3412.437978][T29322] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:10:45 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:10:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000500, 0x8}, {0x1}]}) [ 3412.587379][T29324] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3412.625884][T29324] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3412.677478][T29322] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:10:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x200000f9}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000010000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:45 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:10:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x80000008, 0x8}, {0x1}]}) [ 3412.940376][T29363] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:10:46 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:10:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x7ffff000}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) [ 3413.119921][T29363] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:10:46 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:10:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x7}, {0x1}]}) 01:10:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0xfffffdef}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x15}, {0x1}]}) 01:10:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000012000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:46 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:10:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0xfffffffffffffdef}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) [ 3413.699666][T29417] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:10:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x7ffff}, {0x1}]}) 01:10:46 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) [ 3413.847330][T29417] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:10:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:10:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000014000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x20000288}, {0x1}]}) [ 3414.049598][T29450] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:10:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) [ 3414.097383][T29450] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:10:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:47 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none}, 0xa) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0x41bf, 0x1000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x1}, 0x5aa, 0x0, 0xdebc, 0x0, 0x8f, 0x3}, 0x0, 0xd, r1, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r3, r2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003240)='nl80211\x00') dup(0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c51000024de8b8f4a88b66d70b171ac4bceca1f468938c8", @ANYRES16=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240048c1}, 0x4001) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4000, 0x0, 0x6, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:10:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:10:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1}]}) 01:10:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000034000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:47 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:10:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x2}, {0x1}]}) 01:10:47 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:10:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000044000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x3d) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:10:48 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:10:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:10:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000047000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:48 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x3, 'veth1_to_bond\x00', {0x800}, 0x3}) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r2, r1, 0x0) sendto$inet6(r2, &(0x7f0000000040)="3c08dfbb3a7a834a33a780ac7e71", 0xe, 0x8040, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:10:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x4}, {0x1}]}) 01:10:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0xffffff1f) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:10:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x5}, {0x1}]}) 01:10:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000048000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000480)={0x4, [[0x7, 0xffffffff, 0x1, 0x9, 0x6, 0x20, 0x7f, 0x6], [0x575, 0x10001, 0x3ff, 0xfffff8ad, 0x3, 0x8, 0x2, 0x8], [0x0, 0xffff, 0x7, 0x0, 0x400, 0x327f, 0x5, 0xffffffff]], [], [{0x0, 0x8, 0x1, 0x1, 0x0, 0x1}, {0x7fffffff, 0xffffffff, 0x0, 0x1, 0x0, 0x1}, {0xf3d, 0x200, 0x1, 0x1, 0x1, 0x1}, {0x100, 0x8, 0x1, 0x0, 0x1, 0x1}, {0x6534, 0x36b9, 0x0, 0x0, 0x1, 0x1}, {0xad42, 0x2, 0x1, 0x0, 0x0, 0x1}, {0x90c, 0x101, 0x1, 0x1}, {0x1000, 0x1, 0x0, 0x1}, {0x9, 0x1f, 0x0, 0x1, 0x0, 0x1}, {0x8000, 0x8, 0x0, 0x1, 0x1, 0x1}, {0x1, 0x7fff, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1, 0x1, 0x1}]}) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:10:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x6}, {0x1}]}) 01:10:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:10:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000180)=0x1) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000080)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) bind$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @any, 0x3}, 0xa) io_uring_enter(r4, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r6, r5, 0x0) fcntl$notify(r5, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700004a000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:10:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x7}, {0x1}]}) 01:10:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = dup(r6) bind$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r7, 0xc058534b, &(0x7f0000000140)={0xa7, 0x6, 0x749, 0x3, 0x1ff, 0x7}) socket$netlink(0x10, 0x3, 0x0) 01:10:49 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:10:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700004c000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:10:49 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @any, 0xc1}, 0xa) 01:10:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x300}, {0x1}]}) 01:10:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x76de, 0x6, 0x9, 0x9, 0xffffffff, 0x0, 0xfffffffe}, 0x1c) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0) 01:10:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x500}, {0x1}]}) 01:10:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700005c000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0) 01:10:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000200)=""/185, &(0x7f0000000080)=0xb9) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x600}, {0x1}]}) 01:10:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0) 01:10:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700005e000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x1, 0x0, [{0xd, 0x8}]}) [ 3417.458330][T29749] validate_nla: 35 callbacks suppressed [ 3417.458338][T29749] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:10:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x700}, {0x1}]}) 01:10:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x1, 0x0, [{0xd, 0x8}]}) 01:10:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000060000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = dup(r4) bind$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r5, 0x3f, 0xa6c2c6de, 0x3, &(0x7f0000000080)={[0xc]}, 0x8) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r7, r6, 0x0) fcntl$notify(r6, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x34, 0x64, 0xd27, 0x0, 0x0, {}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001940)={&(0x7f0000001600)={0x324, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x8f}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x248, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xffc0000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x7, 0xfff}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x324}, 0x1, 0x0, 0x0, 0x4060014}, 0x4000005) 01:10:51 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @none}, 0xa) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x8, 0x12) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x7) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=@nat={'nat\x00', 0x1b, 0x5, 0x6f0, 0x0, 0x530, 0xffffffff, 0x0, 0xf0, 0x620, 0x620, 0xffffffff, 0x620, 0x620, 0x5, &(0x7f0000000040), {[{{@ipv6={@private0={0xfc, 0x0, [], 0x1}, @mcast2, [0xff, 0xff, 0x0, 0xff000000], [0xffffff00, 0xff, 0xff, 0xff], 'sit0\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0xc, 0x0, 0x6, 0x4}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv6=@empty, @ipv4=@empty, @icmp_id=0x65, @gre_key=0x2}}}, {{@uncond, 0x0, 0x208, 0x330, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x7fff, [0x410, 0xd40], 0xcbcd, 0x4, 0x7, [@dev={0xfe, 0x80, [], 0x32}, @private0={0xfc, 0x0, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private1, @ipv4={[], [], @private=0xa010102}, @empty, @loopback, @private1={0xfc, 0x1, [], 0x1}, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, [], 0x11}, @local, @mcast2], 0x3}}, @common=@hl={{0x28, 'hl\x00'}, {0x2, 0x5}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1, 'system_u:object_r:klogd_var_run_t:s0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0xc9f9, 0x80], 0xfffffff7, 0x0, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x1, 0x5}, {0x1, 0x5, 0x3}, {0x1, 0x2, 0x7}, 0x1, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv4=@broadcast, @ipv4=@local, @port=0x4e24, @gre_key=0xff}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x750) dup3(r1, r0, 0x0) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000000)=0x5, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f00000000c0)={0x14}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) [ 3418.396018][T29772] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 3418.480069][T29780] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:10:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x1, 0x0, [{0xd, 0x8}]}) 01:10:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3f00}, {0x1}]}) [ 3418.531063][T29780] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3418.588730][T29772] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:10:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14, 0x800) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, r2}, 0xc) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) bind$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r4, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000300)={@x25={0x9, @remote={[], 0x3}}, {&(0x7f0000000200)=""/206, 0xce}, &(0x7f0000000180), 0x4b}, 0xa0) dup3(r6, r5, 0x0) fcntl$notify(r5, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000064000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x80ffff}, {0x1}]}) [ 3418.782464][T29814] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:10:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {}]}) [ 3418.841195][T29814] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3418.873232][T29819] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:10:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0), 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000080)={@broadcast, @loopback}, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) bind$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none}, 0xa) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000140)={r2, r0, 0x9}) io_uring_enter(r2, 0x1, 0x8, 0x0, &(0x7f0000000100)={[0x4]}, 0x8) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r5 = dup3(r4, r3, 0x0) sendmsg$AUDIT_SET_FEATURE(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x20, 0x3fa, 0x400, 0x1070bd26, 0x25dfdbfc, {0x1, 0x4, 0x1}, ["", "", "", ""]}, 0x20}}, 0x4040041) fcntl$notify(r3, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) [ 3418.988160][T29819] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:10:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000068000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x1e) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x1000000}, {0x1}]}) 01:10:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {}]}) 01:10:52 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x20100000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$pptp(0x18, 0x1, 0x2) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES64], &(0x7f0000000140)=0xf5) [ 3419.220442][T29853] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:10:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {}]}) 01:10:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x2000000}, {0x1}]}) 01:10:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700006c000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000140)={'filter\x00'}, &(0x7f0000000200)=0x44) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0xfc5, 0x1a9080) fcntl$notify(r4, 0x402, 0x25) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x34, 0x64, 0xd27, 0x0, 0x0, {}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x84c52030}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24000090) socket$netlink(0x10, 0x3, 0x0) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x1b) 01:10:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x1, 0x0, [{0x1}]}) 01:10:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3000000}, {0x1}]}) 01:10:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x10000, &(0x7f0000000480)=ANY=[@ANYBLOB="747261088a0000642c723c646e6f2ae9f7dcbcbc13111958208aab0cf655bc1da20b8d848f9540cfdef03d28e98c91337f5f902353e04d4dc32529dcbb1be64873cff6b0feaedee3042304cd76ce5a6b5aa3d9cd162b2e650b6e15dad32b842d0e443eedcb61c3b25d130a154cd9e0176340b4cd5e7b5a2ccf3d377aa922ad2290238167f12ef2822919ac8e70a5767feb1efd877f107d640b673113", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=none,cachetag=,fsmagic=0x0000000000000002,\x00']) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) recvfrom$l2tp6(r3, &(0x7f0000000280)=""/231, 0xe7, 0x40000001, &(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x20) r4 = socket(0x2a, 0x80000, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x2a) socket$netlink(0x10, 0x3, 0x0) 01:10:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000074000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x1, 0x0, [{0x1}]}) 01:10:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x4000000}, {0x1}]}) 01:10:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x1, 0x0, [{0x1}]}) 01:10:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x5000000}, {0x1}]}) 01:10:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000078000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r6, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)=0x1ff, 0x4) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x13) 01:10:53 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000180)={0x4, [[0x20, 0x5, 0x8, 0x4000, 0x6, 0x7f, 0x0, 0x20], [0xa36e, 0x0, 0x6, 0x3, 0x100, 0x200, 0x993, 0x1], [0xbeb7, 0x0, 0x9, 0x6, 0x9, 0xfff, 0x3, 0x5]], [], [{0x1, 0x1, 0x0, 0x1}, {0x80, 0x7, 0x1, 0x1, 0x0, 0x1}, {0x3, 0xfffffffc, 0x1, 0x1}, {0x9, 0x40, 0x0, 0x1, 0x0, 0x1}, {0x4, 0x1ff, 0x1, 0x1, 0x0, 0x1}, {0x7fff, 0xff, 0x1, 0x0, 0x1}, {0x8, 0x9, 0x1, 0x1}, {0x6, 0x3f, 0x0, 0x1, 0x0, 0x1}, {0x11, 0x7, 0x1}, {0x5, 0x9, 0x1, 0x1}, {0x4, 0x7, 0x0, 0x0, 0x1, 0x1}, {0x8, 0x800000, 0x0, 0x1, 0x1}], [], 0x2000000}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f00000000c0)={0x1, 0x10, [0xbc, 0x9, 0x3, 0x2]}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000000000)={0x6, 0x1, 'client0\x00', 0x4, "3dea3cf78c6453ba", "90e24656abdc5d8a7a0f364a330b3cb95d9981b0e34dce89fd264fcc076e8e12", 0x7, 0x200}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:10:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x0, 0x8}, {0x1}]}) 01:10:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x6000000}, {0x1}]}) 01:10:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700007a000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x4, 0x3f, 0x1, &(0x7f0000000240)={[0x80003]}, 0x0) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003240)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRESDEC=r3, @ANYRES32, @ANYRES16, @ANYRES32=r6, @ANYRES16, @ANYRES64], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="98000100", @ANYRES16=r7, @ANYBLOB="000425bd7000fedbdf2516000000080001000400000000001a0000000000000000000a001a00bbbbbbbbbbbb000000001a00aaaaaaaaaaaa0000"], 0x40}, 0x1, 0x0, 0x0, 0x10000090}, 0x4040000) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x0, 0x8}, {0x1}]}) 01:10:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x7000000}, {0x1}]}) 01:10:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000f0000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=0x60) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket(0x1e, 0x4, 0x0) r2 = dup(0xffffffffffffffff) bind$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r2, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x77, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r4, r3, 0x0) fcntl$notify(r3, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x0, 0x8}, {0x1}]}) 01:10:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3f000000}, {0x1}]}) 01:10:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd}, {0x1}]}) 01:10:55 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e23, @private=0xa010101}, @in6={0xa, 0x4e24, 0x8a9, @remote, 0x9}, @in={0x2, 0x4e24, @rand_addr=0x64010100}], 0x4c) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:10:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = dup(r4) bind$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$UI_SET_RELBIT(r5, 0x40045566, 0xb) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r7, r6, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000200)={0x4, 0x8, 0x0, [{0x6, 0x4, 0x1, 0x7, 0x9, 0x7, 0x81}, {0x6c59, 0x80000000, 0xffffffff, 0x81, 0x9, 0x8, 0x8}, {0x49, 0x43, 0x8001, 0x0, 0x7, 0x20, 0x20}, {0x4, 0x4, 0x9, 0x6, 0x7f, 0x3, 0x80}, {0x7, 0xb03, 0x6, 0x1, 0x2, 0x7f, 0x40}, {0x7, 0x9, 0x8, 0x32, 0x5, 0x6, 0x20}, {0x2, 0x2, 0x9, 0x4, 0x19, 0x2, 0x4}, {0x81, 0x0, 0x1ff, 0x2, 0xff, 0x7f, 0x6}]}) fcntl$notify(r6, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000fe000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0xfdfdffff}, {0x1}]}) 01:10:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd}, {0x1}]}) 01:10:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0xffff8000}, {0x1}]}) 01:10:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd}, {0x1}]}) 01:10:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x6, 0xfffffffd, 0x5, 0x8, 0x4a, 0x1f, 0x6}, 0x1c) dup3(r5, r4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYRES64], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB='4\x00\x00\x00d\x00\'\r\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00000000000000000000000009000100727376700000000004000200"], 0x34}}, 0x0) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000180)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000b8010000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:55 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @any, 0xc1}, 0xa) 01:10:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0xfffffdfd}, {0x1}]}) 01:10:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1f, 0x800, 0x40000) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) [ 3422.498057][T30115] validate_nla: 30 callbacks suppressed [ 3422.498067][T30115] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 3423.012365][T30136] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3423.081595][T30136] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:10:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000030000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:57 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @any, 0xc1}, 0xa) 01:10:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xe0c}, 0x1, 0x0, 0x0, 0x8080}, 0x2000c000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1}]}) [ 3424.050024][T30149] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:10:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='/usr/lib/telepathy/mission-control-5\x00', 0x25, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x800) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={r4}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={r4, 0xffffff9c}, &(0x7f0000000040)=0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) [ 3424.136333][T30153] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3424.151690][T30164] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=30164 comm=syz-executor.4 [ 3424.199763][T30149] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:10:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x2}, {0x1}]}) [ 3424.290831][T30153] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3424.299299][T30164] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=30164 comm=syz-executor.4 [ 3424.314499][T30173] SELinux: Context /usr/lib/telepathy/mission-control-5 is not valid (left unmapped). 01:10:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000024030000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3424.413981][ T27] audit: type=1400 audit(1593911457.539:80): avc: denied { relabelto } for pid=30169 comm="syz-executor.0" name="TIPC" dev="sockfs" ino=579628 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=socket permissive=1 trawcon="/usr/lib/telepathy/mission-control-5" 01:10:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x3}, {0x1}]}) [ 3424.613301][T30184] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:10:57 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10000, 0x20, 0x13}, 0x18) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r2, r1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000080)=0xe8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = dup(r4) bind$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @none}, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x17, 0xf0a4, 0x20, 0x8, 0x400, r0, 0x3, [], r3, r5, 0x1, 0x2, 0x2}, 0x40) [ 3424.747927][T30184] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:10:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x4}, {0x1}]}) 01:10:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700005c030000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x5}, {0x1}]}) 01:10:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="00fcffffffffffff270001000000010076657448"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x34, 0x64, 0xd27, 0x3, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xffff}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x54, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4040000) socket$netlink(0x10, 0x3, 0xa) mq_timedsend(0xffffffffffffffff, &(0x7f00000002c0)="47ec39a192b35dbe7c935939093fb22a4c02d3baabd2242f6f1fc898e4c78f0858c3f3f9528093db20416c579377be0098567a0898b46fa34c27bc0046580d2b8a6cfe39ec6c227758d0f5874b5815caacd38219ce", 0x55, 0x8, &(0x7f0000000340)) [ 3425.133068][T30218] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 3425.302612][T30223] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30223 comm=syz-executor.4 [ 3425.445528][T30223] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30223 comm=syz-executor.4 01:10:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='/usr/lib/telepathy/mission-control-5\x00', 0x25, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x800) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={r4}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={r4, 0xffffff9c}, &(0x7f0000000040)=0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:10:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x6}, {0x1}]}) 01:10:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000084030000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r3, r2, 0x0) r4 = dup(r2) bind$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r4, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x1}, 0x10) dup3(r6, r5, 0x0) fcntl$notify(r5, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:59 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none}, 0xa) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r3, r2, 0x0) ioctl$SIOCAX25GETINFO(r2, 0x89ed, &(0x7f0000000080)) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000000)=0x18cc5378) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x6) listen(r4, 0xfffffffd) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:10:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000b4030000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:10:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x7}, {0x1}]}) 01:10:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r7, r6, 0x0) dup3(r7, r4, 0x80000) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:10:59 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r2, r1, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000040)={r5}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={r5}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r6, 0x7, 0x4, 0x24, 0x5, 0x46d}, 0x14) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:11:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x300}, {0x1}]}) 01:11:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000bc030000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:00 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e23, @private=0xa010101}, @in6={0xa, 0x4e24, 0x8a9, @remote, 0x9}, @in={0x2, 0x4e24, @rand_addr=0x64010100}], 0x4c) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:11:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, r3, r3) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x1, 0x0, 0x0, 0x1220859, &(0x7f0000000200)=ANY=[@ANYBLOB="7569643dd1240f97e2c5f228f172bb1b36dae5619f29f8312a2246506f293181bc1f5b896c1767afd6d00a3accfe22067eea18e0560d206b742a781bd7e757b42f5d90da57d23c67eb6b75a7d7c7b563caff5528cc3e562304f3624198cb37986252b34c16846ee552ffa8a15a4180f4385c50e6dbd976db581b050a51d587773d912c3001ce6985f72de69c249b6004348cd61305948638bfa3059d0facae627b65836236335bd8c6e3b190fe346c120e880c0a20f699000000000000007d", @ANYRES16, @ANYRESHEX, @ANYRESHEX=r2, @ANYBLOB=',part=0x000000000p000006,subj_role=,smackfs/ f=$,subj_type=socket\x00,', @ANYRESDEC=r3, @ANYBLOB="2c7375626a5f757365723d2002002c00"]) chown(&(0x7f0000000080)='./file0\x00', 0x0, r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = dup(0xffffffffffffffff) bind$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r5, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r7, r6, 0x0) fcntl$notify(r6, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x500}, {0x1}]}) 01:11:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000cc030000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:00 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000041c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2110}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none}, 0xa) write$P9_RLERRORu(r1, &(0x7f0000000040)={0xd, 0x7, 0x2, {{}, 0x2}}, 0xd) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r3, r2, 0x0) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:11:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x600}, {0x1}]}) 01:11:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000200)={0x2, 0x3, 0x4, 0x10000, 0x6c, {0x0, 0x2710}, {0x3, 0x2, 0x2, 0xc0, 0x4, 0x3, "e1ce82f9"}, 0x4, 0x3, @offset=0x7, 0xb45e}) dup3(r5, r4, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = dup(r6) bind$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$SG_GET_SG_TABLESIZE(r7, 0x227f, &(0x7f0000000080)) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000e6030000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3427.648484][T30371] validate_nla: 17 callbacks suppressed [ 3427.648494][T30371] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3427.747864][T30371] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3427.798174][T30381] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x700}, {0x1}]}) 01:11:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) socket(0x1e, 0x4, 0x0) socket$kcm(0x29, 0x2, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/kcm\x00') r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendfile(r4, r5, 0x0, 0x38a8) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r8, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000080), 0x4) [ 3427.955103][T30381] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000f2030000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x3f00}, {0x1}]}) [ 3428.155965][T30403] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3428.244384][T30403] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3428.289716][T30409] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 3428.450128][T30409] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x80ffff}, {0x1}]}) 01:11:02 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000000)) 01:11:02 executing program 4: socket$netlink(0x10, 0x3, 0xd) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @multicast1}, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) bind$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r2, 0x5, 0x7, 0x0, &(0x7f0000000100)={[0x2fa]}, 0x8) socket(0x1e, 0x4, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000080)) r3 = socket(0x8, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) dup3(0xffffffffffffffff, r3, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffe, 0x0, 0xfffffffc}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, r1, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) socket$netlink(0x10, 0x3, 0x4) 01:11:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000fa030000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:02 executing program 1: rt_sigpending(&(0x7f00000001c0), 0x8) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x9, 0x7, 0x10012, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000140)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000340)={0xffff, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000080)={r2}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)=@req3={0x80, 0x7fff, 0x7, 0xfffffffc, 0x7, 0x3, 0x80000001}, 0x1c) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x4, 0x3f, 0x8, 0xe4f, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x1, 0x10001, 0x3, r4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000080)={r5}) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r6 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x4, 0x3, 0x0}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x401, 0x500) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000080)={r7}) dup2(r0, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000180)) [ 3429.367155][T30441] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 3429.488495][T30441] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x1000000}, {0x1}]}) 01:11:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000200)={0x8, "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"}) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000050000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x2000000}, {0x1}]}) 01:11:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)={0x3, 'ipvlan0\x00', {0x1f}, 0x8}) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000080)={0x0, @rand_addr, @loopback}, &(0x7f0000000140)=0xc) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000060000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x3000000}, {0x1}]}) 01:11:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:03 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000e34000/0x5000)=nil, 0x5000, 0x4, 0x800616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0xe67, 0xb, 0xac, 0x7, 0x7fd, 0x2, 0xfff}, 0x1c) dup3(r2, r1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1, @ANYRESDEC, @ANYBLOB="3108de45631ba35061877b0e3595b1fe917a9a500600b679333c3bd5f19323437c12317af1b5aa9076c9f752f9021bf7f6e3d943904fc21f3c8879ced970b7f76ea7d45b3f36a416f6030beab64a338caa321e3438bcbfdb3ad03f5731e00b9a46e97b40bf7b87121c7830ed75b83807c7637690c5c820a15df497d79f730ad37e919111c4f39518114c456706b321dc780de3eb2cc0a776c7c4a5d3c652b30cdf9590f033deba5dcd49736a739301b1a55329822c2cb71aa0dcbc1bf361957529ef"], &(0x7f0000000140)=0xf5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x1, 0x0, 0x0, 0x1220859, &(0x7f0000000400)=ANY=[@ANYBLOB="5ed42680535f1f36d1c19e7a13f16e0f5e570f47410365b11a82742d30a4042c2b4d35d50b8a7115041f7f782f98a05aa5a26c00"/66, @ANYBLOB="000017", @ANYRESHEX=r3, @ANYRESHEX=r5, @ANYBLOB=',part=0x000000000p000006,subj_role=,smackfs/ f=$,subj_type=socket\x00,', @ANYRESDEC, @ANYBLOB="2c7375626a5f757365723d2002002c00142da2666ebc7eaa47476741ebf32f3d55ec4e05add15ed3111de53d12960381a7459e63452fd38b96107b3b7d38568bdc598277f8f9011e28dbd3c8fbacba08144282af8c6dcf3979db2ca2d35d9e3b3cdfbcb580d8714645ea77d31945b0413df659f30916e30d551746d622311e0130405d5604e930cbd731bce9c069470ccb7866d5eca439b2eeb90c5b80d16c14b5513fc07411247a10f15779387c72d905179a451d76870ba9f866952954cad34fdd06a7f11788f651b96287d9000000000000000000"]) setfsuid(r3) 01:11:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xe) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x9, 0x5, 0xf113) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x9, &(0x7f0000000140)="76da46f618b43c02a5b3237bf51467ef51779bd9aac61e09384425bed69ef3b1f1ebc574358e412c466516e52e905436a8a49710645cd0a3ae40b943df1ec4188d4b0b3f7ce89b6b4624274c82e0fe5b4e0fa8e0509f764eba8844ab47") ptrace$cont(0x9, 0x0, 0x0, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000080)) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x4000000}, {0x1}]}) 01:11:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000070000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:03 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x408500, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x16) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:11:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x5000000}, {0x1}]}) 01:11:03 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000090000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x6000000}, {0x1}]}) 01:11:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) r6 = accept(r0, &(0x7f0000000140)=@l2tp={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x80) socketpair(0x21, 0x5, 0xf316, &(0x7f0000000000)={0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r8, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0xa}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x51) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r8, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80) socket$netlink(0x10, 0x3, 0x0) 01:11:04 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) rt_sigprocmask(0x1, &(0x7f0000000080)={[0xa2dc]}, &(0x7f0000000140), 0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) fallocate(r1, 0x28, 0x7fffffff, 0x401) r4 = openat2(r3, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x0, 0x10, 0x2}, 0x18) io_uring_enter(r4, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3ff}, 0x10) dup3(r6, r5, 0x0) fcntl$notify(r5, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000000a0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x7000000}, {0x1}]}) 01:11:04 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:04 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xfffff000) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:11:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000080)=@req={0xfff, 0x9f36, 0x2, 0x6}, 0xfffffffffffffe3a) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:04 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x3f000000}, {0x1}]}) 01:11:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x9, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) dup3(r6, 0xffffffffffffffff, 0x0) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000200)=""/163, 0xa3, 0x2020, 0x0, 0x0) 01:11:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700005b0b0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0xfdfdffff}, {0x1}]}) 01:11:04 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0xffff8000}, {0x1}]}) 01:11:04 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x10000]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x3, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r6, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000140)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0x80, 0x80800) 01:11:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000000c0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0xfffffdfd}, {0x1}]}) 01:11:05 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={r3}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000000)={r3, @in6={{0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}, 0x8535, 0x4, 0xfffffffe, 0xa97, 0x1}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r4, 0x10000}, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[@ANYBLOB="3fde30765a919e46361d95c7e7aa914c099c5829c79cb3b84a5cc16d86e8c1fbbae40053d852bdf098dc2ace26fcb2638d632a951b1f5ab9f0c0710873d13f69429ccb356fcb20040ec1415611e109590549280f9cd10519d36ea4c0b8d7778709962ac848ac64d9d905e04e6d70cd7c81fb85852e7695968389e7e7d341a3dde41ae638e456889579b1d926"], &(0x7f0000000140)=0xf5) 01:11:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @any, 0xfe}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x8, &(0x7f0000000080), 0x4) r5 = socket(0x1e, 0x4, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$FS_IOC_ENABLE_VERITY(r6, 0x40806685, &(0x7f00000002c0)={0x1, 0x2, 0x1000, 0x91, &(0x7f0000000200)="9d99f091b4bae1fd37552ff2670bf4323a647685fee5c75e8f3a18b95ad3e5d39289833f7e594be42f87d2643249f260d1f8b7684d8bd6d4a432834c4f668a7951bf7f18ae755c7d19924a07f541ef8d766cd0ddd7efa1ebec6381c44c85491b990b241ae211518e1ba29282d9e428cb4ea93a2194959b4b9ad871583342848481ef1c7af581f91e5a877f26677a258d8d", 0x4b, 0x0, &(0x7f0000000140)="03d043e834bfc073596c859b878c980f4cee7806ce68e36149ca040d85a554c01f6d6c65eac5cf6081804d47118bb3f1c92fd0c4b953817191bf0a9735ad3932078f649b32c318fb8dec90"}) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1}]}) 01:11:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000000e0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x800, 0x0) r5 = socket(0x1e, 0x4, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = dup(r6) bind$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$TUNSETVNETLE(r7, 0x400454dc, &(0x7f0000000080)=0x1) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r4, 0x111, 0x2, 0x0, 0x4) 01:11:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x2}, {0x1}]}) [ 3432.657701][T30748] validate_nla: 32 callbacks suppressed [ 3432.657710][T30748] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3432.720161][T30749] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:06 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) [ 3432.798203][T30748] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3432.828787][T30749] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000000f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x3}, {0x1}]}) 01:11:06 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) [ 3433.077802][T30777] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:06 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) [ 3433.198029][T30777] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x4}, {0x1}]}) 01:11:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000120000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@private1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@private2}}, &(0x7f0000000180)=0xe8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x8200a, &(0x7f0000000300)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@mmap='mmap'}, {@nodevmap='nodevmap'}, {@aname={'aname', 0x3d, '#)\\'}}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}], [{@euid_gt={'euid>', r6}}, {@dont_hash='dont_hash'}]}}) 01:11:06 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000fa8000/0x4000)=nil, 0x4000, 0x0, 0x6, 0x20000) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(0xffffffffffffffff) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$SOUND_MIXER_READ_RECMASK(r3, 0x80044dfd, &(0x7f00000001c0)) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x54, r4, 0x401, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc}, {0xc, 0x8f}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r4, 0x100, 0x70bd2d, 0x25dfdbff, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004450}, 0x4080850) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:11:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x5}, {0x1}]}) 01:11:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) [ 3433.474873][T30818] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3433.506360][T30817] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 3433.566557][T30818] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3433.607912][T30817] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:06 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000335000/0x1000)=nil, 0x1000, 0x4000, 0x4, &(0x7f0000c12000/0x4000)=nil) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:11:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1d, 0x6, 0x97a) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000140000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x6}, {0x1}]}) 01:11:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x7}, {0x1}]}) 01:11:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000200000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = dup(0xffffffffffffffff) bind$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r2, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = dup(r5) bind$bt_rfcomm(r6, &(0x7f0000000040)={0x1f, @none}, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x19, 0x7, 0xb853, 0x80, 0x420, 0xffffffffffffffff, 0x80000000, [], 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x40) ioctl$RTC_PIE_ON(r6, 0x7005) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) fsetxattr$security_selinux(r6, &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:vmware_device_t:s0\x00', 0x25, 0x1) dup3(r4, r3, 0x0) fcntl$notify(r3, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x300}, {0x1}]}) 01:11:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) [ 3434.239077][ T27] audit: type=1400 audit(1593911467.369:81): avc: denied { relabelto } for pid=30885 comm="syz-executor.4" name="RFCOMM" dev="sockfs" ino=582701 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:vmware_device_t:s0 tclass=socket permissive=1 01:11:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x28, 0x4, 0x4) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140)=0x7, 0x4) dup3(r5, r4, 0x80000) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000080)) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000003240000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x500}, {0x1}]}) 01:11:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0) 01:11:07 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x1411, 0x200, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}]}, 0x28}, 0x1, 0x0, 0x0, 0x48890}, 0x8004) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$cont(0x9, 0x0, 0xff, 0x7) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000000)=""/109, &(0x7f0000000080)=0x6d) rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1, 0x8, 0xf3d, 0x81}, 0x6}, 0x20, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:11:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x600}, {0x1}]}) 01:11:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x4788, 0x3, 0x7fff, 0x800, 0x1, 0x8, 0x1f}, 0x1c) dup3(r6, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000080)=0x80000) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000340000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0) 01:11:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x700}, {0x1}]}) 01:11:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r6, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000080)=0x2, 0x4) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000003f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0) 01:11:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x3f00}, {0x1}]}) 01:11:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x1, 0x0, [{0x40000001, 0x8, 0x3}]}) 01:11:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000400000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x80ffff}, {0x1}]}) 01:11:08 executing program 0: mmap(&(0x7f0000769000/0x1000)=nil, 0x1000, 0x7, 0x10, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x29, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r2, r1, 0x0) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000040)=0xffffffff, 0x4) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(r0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:11:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={r4}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000200)={r4, @in={{0x2, 0x4e24, @multicast1}}, 0x3, 0x5, 0x7, 0x8}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r5, 0x2965, 0xfffffff8}, &(0x7f0000000180)=0xc) r6 = dup(r2) bind$bt_rfcomm(r6, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r6, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fc]}, 0x8) r7 = socket(0x1e, 0x4, 0x0) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r8, r7, 0x0) fcntl$notify(r7, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x1, 0x0, [{0x40000001, 0x8, 0x3}]}) 01:11:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x1000000}, {0x1}]}) 01:11:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000088400000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:09 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x8003906, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000000)=0xb45, 0x4) 01:11:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x1, 0x0, [{0x40000001, 0x8, 0x3}]}) 01:11:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) dup(r2) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x2000000}, {0x1}]}) 01:11:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {}]}) 01:11:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = dup(r6) bind$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$HIDIOCGRAWINFO(r7, 0x80084803, &(0x7f0000000140)=""/114) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x3000000}, {0x1}]}) 01:11:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000440000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {}]}) 01:11:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004e40)=[{{&(0x7f0000000140)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000200)="8b89d2eba0d6ec9fca650938adedaf9efb2f75e1eb6b1697e3d69e0e0fb5c4e140c109395d6d10bdb62aa16147c4c5ede577823eebc4b46d1190e6b116d69c58b3c1be327334dc1e9f06eebd7a73f63189c365e95939e706bcdc9b4bb3631f13e76232ef122d47138a5038a99592ecfed04369bec6487d00e9d6b6b9c9c0e5e747360c1dc08c35ef76bf327e073ea59932419c57cff469d1296824f3a9e938bd91cacd9bb75cb9ce51473da61392a99ef32a541edb499a1694a49d3b15844f435d5c2b1913b55657a5223f6a4fa48b7c0bc73501bec166f6a749e2fd1fc2e9", 0xdf}, {&(0x7f0000000300)="07709d426311812899", 0x9}, {&(0x7f0000000340)="d8071be9f3edce9ab9987f4c7a3af918b10408bac0a5e0d90c7f20e61c900e09507d52e8030c31ab100ba19189931e908f8497d0c3499519d390c5f7b72fe355", 0x40}, {&(0x7f0000000380)="b8f630ca574bd566fde53e1677668cb4f467750c066ffba8a765f22d2280546bc3ba29d10dc1ea7d0f1b55422f2ceecfc9714555399eec72db1fa075c3b5c510cfd1f384034331f351bc8d8121c3c918abd73633c86f5c6c788785ba02c42c703994a569fc0287f4746e12e2c8590056af9aca1736bc24e0a5b59b406d71b973c488829612af174651ffaceabde391ea653083fa7bb429c79dc084f0e32ef154449087e63ac7e249933dad2524addd7f7175a9edc6db28", 0xb7}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="e52973c221b83a", 0x7}, {&(0x7f0000001480)="5c40157508e9ac281e47685917930686896db345799b4c4573df45ed02b430595f85dead81a68becc1c5a76940c820b21a62a9e751a2247da449ef71b328bf", 0x3f}, {&(0x7f00000014c0)="53c3b3a0c966041f57d8404c4f37fef1efe8d6ed004a8c03738b85fe22dc3ba2720305a0546bc06d1c4ef09ca70f7505afb38765d7d97c513d3e5c55005e6b4f601e2a8771fc2b26a5de1a4712ef3d37e236ce606fd6c09f93d238ec5fa7d6ac", 0x60}, {&(0x7f0000001540)="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", 0x1000}], 0x9, &(0x7f0000002600)=[{0x38, 0x117, 0x401, "7c2d36c96b797ab4855d9fa5167d548ce650c26a49cfb48bae11b0af846ba586a8851fd8cbd9"}, {0xa8, 0x84, 0x7ff, "109329e635140582d4db57c19393e2aa517df790ee0a9aee0b41e2d724b16bd63731a9d0c16aa0298acfedbd128461f2bfb13adf62ec37e1fff43277736c81432c10434a69f294b3f9727eb85873247bd8525fdea9fca755e2d66f3327fc75cc3ed931b34729c277bfef382ab1c8760460f50fbbc7205dc69a01357b8e24f1dd8d6c11a0195165d7b1e0e290104ea7b97bd9000b5be5cc02"}, {0x10, 0x109, 0x5}, {0x20, 0x104, 0x9, "eeca97d9cbd44e94241bd237740722c3"}, {0x1010, 0x6, 0x8, "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"}, {0x28, 0x104, 0x83b, "d3b807a6f5b880dc52c9a55ed44689eaf89c131812828a"}], 0x1148}}, {{&(0x7f0000003780)=@ipx={0x4, 0x4, 0x9, "1edb60dbda64", 0x1}, 0x80, &(0x7f0000004bc0)=[{&(0x7f0000003800)="8d5a3802c95f63f0195895295daacae81c9bad2e354d7f4dbbba19fc6ba605495b00822e513b7551de022c02d289cc8466f9962445bce027114d75104d79111a69b9015f663f0cec39d7a86e8f77b3ce2ca4ca99a6fbc4ff88726078d5d5073b30b7d428518e053ac79865a5d07491dcfc4a18745ea211fbc36bedf64e276ca22bdf40cc", 0x84}, {&(0x7f00000038c0)="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", 0x1000}, {&(0x7f00000048c0)="aa49960cab0810a913d98a41ce0aac29179c061bffdd3f47a9d074bb61fae70f89d52e2044e7b99a24d291210b20e173936e3add7861fa9173ab27c5c3c17f8749dd7953b1eb2cbbcb3c3d8d9a80a71954f0", 0x52}, {&(0x7f0000004940)="a96516071f02d31f2b1c45779c0b3a8fc932a17a2309aa3c89f03baa892057c235d8dcb6e5afd8962aad2ef6aeb3e362b1ab3b6200a34de6926ac4b9aa7d94dca08ddf43b0c09636a6337cb47b", 0x4d}, {&(0x7f00000049c0)="e0922512587529256c1822baa494efde68fcc762cd9b96bae160a23fcfcfa0b42a235eb00208b1", 0x27}, {&(0x7f0000004a00)="b1bfd215cbe6c7cfa7bc5128f5cc10da2f7f0bcc3e13b7aa0d6e0bcf865e26d65d1cffb44d20db523fd61d5686112ea9070d95adb1fea68c96ba017288e3ad885188160705a3258f01c50025fa3d9f79437052fe80dc29d897b4c899ab957d64860a4e80bf61cb910bc47d281dd376e4e7892323642872efd4e66863ce51fcccd6db29cb92256bc66b3b051fc914a14d8f323f759a17e48ea7e4e1e304b366066fb1c74051125c5c9b98a60204fd588782d79101eb0773d994e0e3344fffb001aa4c5230a6c8c644e4764e407ec7e1b3464667ec851f5fd3f02d38fff6", 0xdd}, {&(0x7f0000004b00)="759c120c70814f579c9c1c078ce9e8417ab6278c24d101e293b6bc4d295051e6a13d0c4ac6482eb16d38a9470406e805ade4aa72bd56dd90bfb2c470046a54465988ef4f04c44e0b1f88c8674a59b81549adf0dbbd3e9574204ad9c16cef21729e6d1a06da857cba7bb7864a05988042f2807b60b5ff455e8fe66df2184178d280a58b7e", 0x84}], 0x7, &(0x7f0000004c40)=[{0x58, 0x6, 0x4, "e1aaa036c271103927929cc9362a00b3a4cd079a77f60841c5756acbf2004f761f7235779b3614d944c646edd4c0ca652c385b7577562c3778589d44fe9a768f44e0"}, {0x20, 0x84, 0x9, "25decc1bf1126e794c02054d3f07"}, {0xc8, 0x113, 0x9b, "dbdbff6efb0737c8813a2e8576da0f2f0b1e22c31dfb11a74d9c39b4f1d2bfa5c74415d923eb03d77f4e5aa9dd98786595e453fe80dc4ff1efad78f369146ddcf72e9770acbf58623f4e5ee4bcd370735aa7aa9ed1fad5900176e456731d77fdf18cb671dbd0ed42dfb9263a5dd6eee66f7c4e50c4b26d3cbbbb04a9db6a7ebf38fe52753202c49646477ccfed1be00f63bf291ca8528c71c992e2297264e20dbaa259ac66dd4195f8c11114b1e6567e19adf7"}, {0xa0, 0x110, 0x9, "c34337fd4d797b51d78c2677d99d2b38dad969c0848d4e043ab72ab9379e4feee0ff110432c1632181dec49f4950cad6bcfe95479c840ac5553e157797ec3cd6ebb5a3d6faf3dc5413755459cb4d575fbd15407def7c4dfd2d47ac62981ebd2c5bbcf233bf852932cec252f95ff8964f8978c2aac49d9d5cfb7c05c287c2333ebe7cacb5949455a9cd2e8097"}], 0x1e0}}], 0x2, 0x20000000) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000080)=@req={0x6, 0x0, 0xfffffff9, 0x9}, 0x10) dup3(r5, r4, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x80000000, 0x4) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x4000000}, {0x1}]}) 01:11:09 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x4000010, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x400, 0x53) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4, 0x4, 0x0, 0x1}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:11:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000470000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {}]}) 01:11:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r6 = dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r6, 0x806c4120, &(0x7f0000000140)) 01:11:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x5000000}, {0x1}]}) 01:11:09 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) unshare(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:11:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x1, 0x0, [{0x1}]}) 01:11:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000480000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}, {&(0x7f0000000140)="89db74f7eb91f77a67b1ba08ce13933b0fc0ce35f102beb80303eab6171314c5c43ee6582317ac36539d240d8f9fdf5013ce146f753042dc768ee0ed48fa2c4a57135b6ff513cd1d5336578635fbbf18eb09cf6a7e9f294f2d0582fb7e434a8d3d96cebc6ed253eddc771efcba1e47cc8201fc60cea9c63655379c94262d14", 0x7f}, {&(0x7f0000000200)="3b82a5022c7ffa62ba6003fe4f9b5f7ec685bd6a2346afee8ef47d9b611f6fc8fa42527386aaccf4026130a4835c2d52b046b22966a221d9ef4bf4a4b45a363259fcb877afaad7312af017bdb441d0cfa269b84d0deb7e0f89c7807ec525a4c612cba03293d46229acf5ccf9943e8a5a2c0b51eebba87e16e3250ce41a188e8cc49b2a25155a7e3936b70eb2b500c39fb598e3ef6877c8c15b98a04679281f62be4f1141f3ae657bf754cb85ef0bf45cae92177b79ec85b281e1e0ff1239f7bd6ce56a4ac043535ae5540abff71ed60d84373fe356acd67971b4", 0xda}, {&(0x7f0000000300)="2f953959931cecdbe40b32ae5d65fd03828b900c00be32689a3459460b179b2eab8bab1da5b25b1b90c838600ef9093acfe79e87a15fe79724410c776c465a7c6848575ef89406bda24df0f11ab8c1d35f6de8444b1adf9afe84691f3a3b0a0d44e0bba0b5816a541fd9c029de2bf4b5b88df8957b7d973c4ef427fc01ac1652fcdd55da68bef76285836b4c5fb335219b1f98a367df1586ec9faf810cb2e239112e06a72a38999b1e419dd31080c9d64ed713b5f76aed770eb976cf8641867560c5603c129460f42bfe8bf599561df22ebdb3b8681c40c28b66d837cf342e334aca", 0xe2}], 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000005c0)={'security\x00', 0xfa, "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"}, &(0x7f00000001c0)=0x11e) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) r4 = socket(0x23, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r4, 0xffffffffffffffff, 0x0) sendto(r4, &(0x7f0000000480)="3842d20f944cd05dac11ec5fe8a25729464c921506621f7bf871cd5a7778a1dd24ce03dc4f8c867f384c7c2411de3c9788e00e703a022b1ed089c72015afb120004e275808c418e594eb8e421da7752a4c99fe2286ea940fdb6b7e15ff20a28e31145b0e0815c5dac1901f462ac5985c1ebc841c381a5bf4390a867e26bb1fe3a35124e04099e847cf5d3cb6ad6f9e079a98a98af8c1546ecc6265fe423e5f01261e5e6ccda4141b4fa4f2f8d66165c151bed13ccf0348f20c", 0xb9, 0x20004000, &(0x7f0000000540)=@hci={0x1f, 0x1, 0x4}, 0x80) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r6, r5, 0x0) fcntl$notify(r5, 0x402, 0x25) 01:11:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x6000000}, {0x1}]}) 01:11:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x1, 0x0, [{0x1}]}) 01:11:10 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x2, 0x10000) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, {0x4, 0x4, 0x7, 0x5}}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) bind$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r4, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x2, 0x4, 0x58, &(0x7f0000002000/0x3000)=nil, 0x34}) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r6, r5, 0x0) fcntl$notify(r5, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x7000000}, {0x1}]}) 01:11:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000004a0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x1, 0x0, [{0x1}]}) 01:11:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = dup(r6) bind$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$RTC_ALM_READ(r7, 0x80247008, &(0x7f0000000080)) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x3f000000}, {0x1}]}) 01:11:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x0, 0x8, 0x3}, {0x1}]}) 01:11:10 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x1, 0x0, 0x0, 0x1220859, &(0x7f00000007c0)=ANY=[@ANYBLOB='uid=', @ANYBLOB="000017", @ANYRESHEX=r2, @ANYRESHEX=r4, @ANYBLOB=',part=0x000000000p000006,subj_role=,smackfs/ f=$,subj_type=socket\x00,', @ANYRESDEC=r5, @ANYBLOB="2c7375626a5f757365723d2002002c00"]) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000000)={0x1f, 0x6, {r1}, {r5}, 0x100000000, 0x2}) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:11:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000004c0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3437.683099][T31262] validate_nla: 48 callbacks suppressed [ 3437.683109][T31262] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x9) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x0, 0x8, 0x3}, {0x1}]}) 01:11:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0xfdfdffff}, {0x1}]}) 01:11:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x0, 0x8, 0x3}, {0x1}]}) [ 3437.876621][T31282] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=31282 comm=syz-executor.4 [ 3437.931985][T31282] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=31282 comm=syz-executor.4 01:11:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x4, 0x80000) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0xffff8000}, {0x1}]}) 01:11:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x0, 0x3}, {0x1}]}) 01:11:11 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x200040, 0x0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, @none, 0x1}, 0xa) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x70, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4beb}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5ec0f604}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x44050) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x90, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/32, 0x20, 0x2, 0xc}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@flat=@handle, @fda={0x66646185, 0x0, 0x1, 0x2b}, @flat=@handle={0x73682a85, 0x110a, 0x2}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}, 0x40}], 0xc7, 0x0, &(0x7f0000000340)="cea6f8175a001c4b72bdad56726efc9cbe32f88c9bac48ee3b9e1f580b8b1312c986ca61015bcc4352299b2960be3e709883b7219f1a5643447686584c1cdd8c4897236f30b449de7eb2039fa14c101372922b9b55e6c9d70bb0dccbbecae3efa7aa7f7d09359f2eaac156025b8ddce118e409cc0d8a7f7291217f06e4151934a66f4a87d722266656310dc8a456f395f7e29a15ab8fa31ded975c5520a84f4fcea2c4d90dae505b04d54f3c7f22075e432f991ba3bbb460729964395b71f8acd18060519d80b5"}) ioctl$KVM_SMI(r2, 0xaeb7) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) [ 3438.097024][T31262] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 3438.185610][T31300] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3438.213618][T31300] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:11:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0xfffffdfd}, {0x1}]}) 01:11:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000065580000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x0, 0x3}, {0x1}]}) 01:11:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r4, 0xffffffffffffffff, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000080)=@netrom={'nr', 0x0}, 0x10) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r5 = socket(0x1e, 0x4, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, 0xffffffffffffffff, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) [ 3438.516716][T31325] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1}]}) 01:11:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x0, 0x3}, {0x1}]}) [ 3438.667615][T31334] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3438.693324][T31325] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 3438.829722][T31334] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:11:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1}]}) 01:11:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000b5b0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x2}, {0x1}]}) 01:11:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x27, 0xa, 0x4) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fb}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x1f7, @empty, 0x8004, 0xfffffffe}, 0x4d) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000140)={@multicast1, @broadcast}, 0xc) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, @fixed={[], 0x11}, 0x8}, 0xa) io_uring_enter(r4, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x23, 0x80804, 0x92) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x2, 0x3}, 0x10) dup3(r6, r5, 0x0) fcntl$notify(r5, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) [ 3439.123753][T31365] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3439.181101][T31368] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1}]}) 01:11:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r2 = dup(0xffffffffffffffff) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r3, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000829bd7000df25030000001400020000000000000000000000ffff7f00000176c209a6adc1f3f1da0522fe2c4a05ba8d23aa081cdfc4557ee322938ab4abd822229c"], 0x28}, 0x1, 0x0, 0x0, 0x20048080}, 0x40114) bind$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r2, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x3}, {0x1}]}) 01:11:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000005c0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1}]}) 01:11:13 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={r4}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000000)={r4, @in={{0x2, 0x4e20, @remote}}, [0xb2, 0x5, 0x0, 0x10001, 0x40, 0x5, 0x81, 0xab41, 0x2, 0xfff, 0x6, 0x100000000, 0x8, 0x3, 0x1]}, &(0x7f0000000100)=0x100) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:11:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x4}, {0x1}]}) 01:11:14 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x200040, 0x0) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, @none, 0x1}, 0xa) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x70, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4beb}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5ec0f604}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x44050) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x90, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/32, 0x20, 0x2, 0xc}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@flat=@handle, @fda={0x66646185, 0x0, 0x1, 0x2b}, @flat=@handle={0x73682a85, 0x110a, 0x2}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}, 0x40}], 0xc7, 0x0, &(0x7f0000000340)="cea6f8175a001c4b72bdad56726efc9cbe32f88c9bac48ee3b9e1f580b8b1312c986ca61015bcc4352299b2960be3e709883b7219f1a5643447686584c1cdd8c4897236f30b449de7eb2039fa14c101372922b9b55e6c9d70bb0dccbbecae3efa7aa7f7d09359f2eaac156025b8ddce118e409cc0d8a7f7291217f06e4151934a66f4a87d722266656310dc8a456f395f7e29a15ab8fa31ded975c5520a84f4fcea2c4d90dae505b04d54f3c7f22075e432f991ba3bbb460729964395b71f8acd18060519d80b5"}) ioctl$KVM_SMI(r2, 0xaeb7) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:11:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000035c0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = dup(r6) bind$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @none}, 0xa) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000240)={0x0, 0x8000, 0xa, [0x6, 0x9, 0x3, 0x7, 0x6, 0x2f9, 0x5, 0x9, 0x7, 0x8001]}, 0x1c) name_to_handle_at(r7, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x75, 0x400, "ef15a1dc179bcbacbfa76e5f21f5cb5a80c4c3fd61cae6e5315d0e5ae65e8030fe8fa37ca6a264301c93a73336b9a6e606df14a81c2b2615e13369a70781bebb10daa054c33c74e29675ffc76b06c298b60ac2b04af9e1889a880e05fa4cafa81fd3828781f9f96641e2c689f3"}, &(0x7f0000000200), 0x1400) socket$netlink(0x10, 0x3, 0x0) 01:11:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x5}, {0x1}]}) 01:11:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x1, 0x0, 0x0, 0x1220859, &(0x7f00000007c0)=ANY=[@ANYBLOB='uid=', @ANYBLOB='\x00\x00\x00', @ANYRESHEX, @ANYRESHEX=r6, @ANYBLOB=',part=0x000000000p000006,subj_role=,sma$,subj_type=socket\x00,', @ANYRESDEC=r7, @ANYBLOB="2c7375626a5f757365723d2002002c00"]) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 01:11:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000005e0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x6}, {0x1}]}) 01:11:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x400842, 0x0) r3 = dup(r2) getsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000140)=0x4) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = dup(r4) bind$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r5, 0x5, 0x7, 0x4, &(0x7f0000000100)={[0x2fa]}, 0x2) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x1e, 0x6, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r7, r6, 0x0) fcntl$notify(r6, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:14 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) socket$can_raw(0x1d, 0x3, 0x1) 01:11:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000600000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:16 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r2, r1, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r4, r3, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES64=r4, @ANYRES64=r1, @ANYBLOB="d51c2567e7e1b28473d152e81946f01441cab8423d20ddee654b6b0466e898ce5ec41167ee8ec234f39fb04bde667f59bf45a94745cf03c3b61a83b4f731d27e5d1b399d70b2e265c1b35814be431ddd9e16ff51a553cf678c723575106f777d5f257ab725b530a3d05212873d32947fdde8fbebbca89276e4f2b59a48f2b8cdc9eab09bc4489c9c8aa1cafe9fd33a231cc933233165f855cfd56c39933809345fa474ebb9d7bfcefe4ad607f9643b00402a75ea550fdf74d438a1f3b0cf4811abed", @ANYRESOCT=r2], &(0x7f0000000140)=0xf5) 01:11:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x7}, {0x1}]}) 01:11:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @rand_addr=0x64010100}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x1}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000640000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:16 executing program 2 (fault-call:3 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) [ 3443.268942][T31531] validate_nla: 18 callbacks suppressed [ 3443.268951][T31531] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3443.322711][T31534] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x300}, {0x1}]}) [ 3443.441836][T31531] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:11:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) [ 3443.703520][T31561] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:11:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x500}, {0x1}]}) [ 3443.790413][T31534] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 3443.966413][T31561] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:11:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x2, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000058650000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x600}, {0x1}]}) [ 3444.297490][T31590] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 3444.468794][T31590] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:18 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000080)=0x54) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:11:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xf) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000080)=0x8, 0x2) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x10, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x700}, {0x1}]}) 01:11:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000680000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3445.112391][T31624] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4b47, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x3f00}, {0x1}]}) [ 3445.287933][T31624] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:18 executing program 4: socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}, {&(0x7f0000000180)="b40c357fef183e84a4c61932395b5e0f12940cb8d6b057446765275eade7b0a08fba94787c767d63270bd80fc1473dd43d", 0x31}], 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) r3 = socket(0x1a, 0x6, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r3, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x6, 'veth0_to_bridge\x00', {0x2}, 0x8}) bind$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r2, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) fcntl$notify(r4, 0x402, 0x25) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) socket$netlink(0x10, 0x3, 0x0) 01:11:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000006c0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4b49, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x80ffff}, {0x1}]}) 01:11:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) bind$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000080)) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = dup(r4) bind$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r5, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r7, r6, 0x0) fcntl$notify(r6, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@multicast1, @rand_addr=0x64010102}, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) bind$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r2, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r3 = socket(0x1e, 0x4, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/input/mice\x00', 0x100) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x50, 0x140d, 0x100, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40009}, 0x24000004) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r3, 0x0) fcntl$notify(r3, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4c00, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000740000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x1000000}, {0x1}]}) 01:11:19 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000040)) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r2, r1, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000000)=0x5, 0x4) ptrace$cont(0x9, r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x80001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x0, 0x0, 0x0, 0x0, 0x8}, r0, 0x0, 0xffffffffffffffff, 0xa) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:11:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x2000000}, {0x1}]}) 01:11:19 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x0, 0x5, 0x1, 0x101, 0x6, "eb4763ae3d42e4a14badd313b52067fbff2987"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) close(0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r2, 0x0, 0x0) keyctl$revoke(0x3, r2) keyctl$set_timeout(0xf, r2, 0x400) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:11:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4c01, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000780000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x7) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, r2}, 0xc) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) bind$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r4, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r6, r5, 0x0) fcntl$notify(r5, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x541b, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x3000000}, {0x1}]}) 01:11:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) lsetxattr$security_evm(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.evm\x00', &(0x7f0000000280)=ANY=[], 0x12, 0x2) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xfeb6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) bind$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none}, 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x28400, 0x84) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, &(0x7f0000000340)=0x9, 0x4) io_uring_enter(r2, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v1={0x1000000, [{0x8f, 0x8000}]}, 0xc, 0x6) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r6 = dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x6) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f00000002c0)) 01:11:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000007a0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x4000000}, {0x1}]}) 01:11:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x5421, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) lookup_dcookie(0x80000000, &(0x7f0000000140)=""/103, 0x67) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) getpeername$qrtr(r5, &(0x7f0000000080), &(0x7f0000000200)=0xc) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000810000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:21 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none}, 0xa) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000000)={0x0, 0x2}, 0x2) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:11:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x5000000}, {0x1}]}) 01:11:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x5450, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}, {&(0x7f0000000200)="31e3e56935066befcc12e563612b0dede13cada824e3ebf03f7aec664f598759d5064ef5f7bf7d5727a4e28481c7a9f46acb1e0ece5c5cc5f480c7e4eae4070b9acba002698e71efe857afdcfa387ad8deeb2c689c006f97bc95a73570327d3aecd7849aaa5e4124da12d5ae45e2124012b79d0ef54ffcd465178c44eb81fed774ea5bfd833d7230d8ccd7b2a3e4f6f1e59f919bd7c3c7d47e1084cd1f1620955c093b884a53975c73265c8332eec3f9bd5f3d09f38f3eae75bd79a9f948fed37c473b5c1449051f2148bcf05445b5c9af69b02a4d35f86923d0245fc4b8c03f839ec4b048b2f75391fe", 0xea}, {&(0x7f0000000300)="efd31adcd4b764641a7dc4b094003119d41a47cd803372c0d21b5b6843b9a5fe8bd67afe9383877b0ae192c28be87b6aa7855d110373c17edb2e325d1d77ebd0d14b3bfbca881fcdcada041fcc4474837e0ec1ccd4eb37587b6c33398287130845ff73fc2341db8b2364d6b7efbe53f940afd5f79feecdd0f7b63064183746668d6522ca58af470c28dca902d9e97da596ffc25d3cfef891b5559cfd3db0842ef4d8afff8fe2b64a6859637320e9efe3e3566ac481b516c1e130834a600f1045ae72c524a7f3a1caa624a18bc89e6376fdd0c7e94f2d0854567a992883fb", 0xde}], 0x3) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x1e, 0x4, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0xc6528fc420540518, &(0x7f0000000400)={@empty, @broadcast}, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) bind$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r2, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r3 = socket(0x1e, 0x4, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = dup(r4) bind$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r5, 0x40bc5311, &(0x7f0000000140)={0x5fe, 0x0, 'client1\x00', 0x2, "9a919fb3f1ee6eb6", "254a7b4cdd35b6170b311d8d523307b5efaacd34c8d2eb41fa905c4534bf9f64", 0x1ff, 0x7}) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r6, r3, 0x0) fcntl$notify(r3, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000003840000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3448.519348][T31855] validate_nla: 18 callbacks suppressed [ 3448.519359][T31855] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3448.561646][T31854] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x6000000}, {0x1}]}) 01:11:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x5451, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) [ 3448.668847][T31855] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:11:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000bb0779c2931d58e0dbb8fdd0e2861b09130ecae2b5f7ea22cfdc7ceb8eabe33844ce7507fe698ece0945f195cdfc197025b8781bbd655ede", @ANYRES16=r6, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x200008c1}, 0x0) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) [ 3448.717487][T31854] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000003b40000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x7000000}, {0x1}]}) [ 3448.891257][T31906] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3448.926740][T31906] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:11:22 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)) 01:11:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x5452, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) [ 3449.003835][T31914] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:22 executing program 4: socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) bind$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r2, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) dup3(r4, r3, 0x0) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000140)={0x1, 0x1, 0x1000, 0xf4, &(0x7f0000000200)="e7e01d854d908d74bf7e2669a8e73a34cca4d9d805276057e60b515dc3e982106b6344c0bed351e29417b47a07de12246e67dde00df61bcd4a28dd90c722d8e730b945ad61fd9142587de9cbe6c3fbcab77ce5b3e3f80a9f80a32196d27784661713c982bc5576e30a3d8b164da9d20feeea2fd641ffc294faaffca0dc27367c87cd3ff63540d75775946749d95171cbd7923eb2001d72c5a9df379111f5b8b66bcbf1bbda7227d0c8e3ea30feb1c0456be7922d8ca93c14db1b41f60ddf41adaf8e5b06aee4d4ea9bf6b9f9faea088d7d095c4ac74b066414d84e316d09e87962d6f473a3c6a10b073d1919ed3ba4cc95a68fe3", 0xcb, 0x0, &(0x7f0000000300)="ba19ec8a4aa744c7e93d0632b4e8eef8a0a750407114b0b576d78b6f08e1ce9acd4b396795a566cfc67f842e487387d9a79c4fe71f34f34686ea93f3eabb7056fed258a037e1466895ae1a65b3da4075c12cc63e85e08ed49a472669a5f42033faabbf4b4d04e77b27157abfdffa4f7959fa12d1c4397cad7d49aa772a0e5c2b18fb428b54673d522d109e5c8cd8e618fd897286d5c21f84e203fda8bb8413185f338f899272e9c5b27498479f77cc2de383eaebaf969f18998e2e1d2688e6e6384800065d5677966da6ee"}) fcntl$notify(r3, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x3f000000}, {0x1}]}) [ 3449.169362][T31914] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x5460, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:22 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r3, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@multicast2, @in6=@dev}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000080)=0xe8) bind$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r2, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000001b80000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0xfdfdffff}, {0x1}]}) [ 3449.510176][T31964] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x6364, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) [ 3449.647483][T31964] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, 0xffffffffffffffff, 0x0) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000200)={'dummy0\x00', 0x100000001, 0xa48}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) bind$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r4, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r6, r5, 0x0) fcntl$notify(r5, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0xffff8000}, {0x1}]}) 01:11:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000003bc0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:24 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000000)='/dev/usb/hiddev#\x00', 0x7fff, 0x40000) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0x2, 0x5, 0x0, 0xffff, 0x7, [{0x2, 0x1, 0x1000, [], 0x4}, {0x0, 0x80000000, 0x6, [], 0x2200}, {0x3ff, 0x2, 0x7, [], 0xd8a}, {0x100000001, 0x0, 0x1, [], 0x107}, {0x1, 0xffffffff80000001, 0x0, [], 0x104}, {0x9, 0x7, 0x3ff, [], 0x201}, {0x556, 0x100000000, 0x0, [], 0x2}]}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:11:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x8912, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) close(0xffffffffffffffff) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={r5}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000240)={r5, 0x101}, &(0x7f0000000280)=0x8) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r7, r6, 0x0) fcntl$notify(r6, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0xfffffdfd}, {0x1}]}) 01:11:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000003cc0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x9, 0x1f, 0x8, 0x64fb, 0xff, 0x5, 0x8}, 0x1c) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x8933, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1}]}) 01:11:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000003e60000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad0002000000000000060400c694781f00000000000000", 0x3d}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x1000007, 0x1, &(0x7f0000000140)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x101000, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) ftruncate(0xffffffffffffffff, 0x208200) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r6, 0x200, 0x0, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004081}, 0x408c0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r6, 0x600, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x73}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x2008c014) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1}]}) 01:11:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xae80, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x8000, 0x0) ioctl$FBIOGET_VSCREENINFO(r1, 0x4600, &(0x7f0000000200)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) bind$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r4, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(0xffffffffffffffff, r5, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r5, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x60, 0x140a, 0x200, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x10) fcntl$notify(r5, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000f00000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xae9a, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x1}]}) 01:11:25 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r2, r1, 0x0) sendfile(r0, r2, &(0x7f0000000000)=0x1000, 0x758) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r4, r3, 0x0) dup3(r4, 0xffffffffffffffff, 0x80000) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:11:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x1}]}) 01:11:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000003f20000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xaea2, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:25 executing program 4: socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r4, r3, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none, 0x4}, 0xfffffffffffffe70) io_uring_enter(r2, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r5 = socket(0x1e, 0x2, 0x3) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(0xffffffffffffffff, r5, 0x0) fcntl$notify(r5, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x1}]}) 01:11:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f0000000180)={0x0, 0x85, &(0x7f00000002c0)=""/133}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) r5 = dup(r4) bind$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$CAPI_SET_FLAGS(r5, 0x80044324, &(0x7f0000000080)=0x1) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x9, 0x4, 0x20) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r7, r6, 0x0) fcntl$notify(r6, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000003fa0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xaea3, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x1}]}) 01:11:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xaead, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000fe0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000fffe0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r4 = dup(r2) bind$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r4, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) ioctl$FS_IOC_GETFSLABEL(r6, 0x81009431, &(0x7f0000000200)) dup3(r6, r5, 0x0) fcntl$notify(r5, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x1}]}) 01:11:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xaeb7, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) [ 3454.516721][T32251] validate_nla: 26 callbacks suppressed [ 3454.516730][T32251] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3454.572189][T32253] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x300}, {0x1}]}) [ 3454.642976][T32251] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3454.677954][T32253] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x400454ca, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r6, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000080)={0x2, 0x2, 0x240, 0x10d7, 0x48ed}) socket$netlink(0x10, 0x3, 0x0) 01:11:28 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'U-', 0xc836}, 0x16, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x0, 0x0, 0x1220859, &(0x7f00000002c0)=ANY=[@ANYBLOB='uid=', @ANYBLOB="000017", @ANYRESHEX, @ANYRESHEX, @ANYBLOB=',part=0x000000000p000006,subj_role=,smackfs/ f=$,subj_type=socket\x00,', @ANYRESDEC, @ANYBLOB="2c7375626a5f757365723d2002002c006fb35d883c315c"]) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=@newae={0x3c4, 0x1e, 0x2, 0x70bd2d, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, [], 0x1}, 0x4d2, 0x2, 0x2b}, @in=@loopback, 0x4b685c4c, 0x3500}, [@algo_auth_trunc={0x143, 0x14, {{'xxhash64-generic\x00'}, 0x7b8, 0xa0, "17c26c852ac918b63f676d9dc3a54851804085fa8ebb49b1df426dbaf9feea15df6f918e4a2e05f9f527570425d55f158e3315acc2a93a583af730bbb74599dca85e4a84e39e0b5c39618e7170fb944fad9ad56bdc4f82f1641650f3dbf7bcb8d92c2befeafecd64bef391078ad0c60823a0b2f7999f6fe75ac3a95ff82e750436e128814206bad6854698be3bf2ffdc75895dab8ae3e4c032d8b677f8cf75c359201a3f01ce28276e2c5b426687d9713e8c6f0e67c9501dcceb1eae84d77fcf56a291554b302e676fc32a7aeea1a6bee6b9b4d70b5b781455edf2d11babb4d9a810c6f19b74ec62c4c6629ceca660ded93171adbe1c5f"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x80000001}, @policy_type={0xa}, @etimer_thresh={0x8}, @replay_thresh={0x8, 0xb, 0x2}, @algo_aead={0x145, 0x12, {{'aegis128l-generic\x00'}, 0x7c8, 0x0, "54a937324c93a6fd51bb64f9ffb213a36186e338bbac8d56e32db20854f0c242b6aa72d494345afbd19506eb6fb82fc3c7a9e519fc6f7e1d2fea1157c832a5d6c2364b48c681faba003bae45ef413dfb4ccd93e9561bb9ca489cf39c748500b35fb4e450e0897e57bb52f6462ec2e50f35c538444914e2ad641ed9a1abd8da0701adc7f4a78d6cbc7c7848bca05d8fcb12c7e711d33c79afc267cc4794afd315d19b7eacff142dde787359381080821f2b0cfeb6af05390f9f614163ebe51717a22bf957eaaf4ca8d7ed771eceddac91b0749f4a9a70cbee7972ef32418f73dae26195e8fd84356088a80735b2f6a61c6031ec232af9069b5b"}}, @coaddr={0x14, 0xe, @in6=@empty}, @srcaddr={0x14, 0xd, @in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x3f}}}, @policy={0xac, 0x7, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@private0, 0x4e20, 0x7, 0x4e24, 0xab2, 0x2, 0xe0, 0xa0, 0x3e}, {0x3, 0x4, 0x5, 0x7, 0x10000, 0x0, 0x5}, {0x5, 0x7, 0x3}, 0x6, 0x6e6bb0, 0x2, 0x0, 0x2}}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x44000}, 0x4c814) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000080)={0x19, 0x62, "c551d89dbc025477f67e1f369a8812c9885fd28e76d24da3892fb60564e78ba17ab33d4026ecfa21302d46d6f6bcd2036414989e226aafac676bb6d8dfb77b73648cab02f33adfd9808d4edf6daa0d0112188dfa8dfa8f6870fda1999fcb3a3bea5e"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:11:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000fff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x500}, {0x1}]}) [ 3454.941275][T32298] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:11:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x40049409, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) [ 3455.020815][T32299] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 3455.117622][T32298] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:11:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x600}, {0x1}]}) [ 3455.168898][T32299] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700007fff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4004ae86, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x700}, {0x1}]}) [ 3455.454213][T32342] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4004ae8b, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) [ 3455.589232][T32342] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="390000001300034700bb65e1c389ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}, {&(0x7f0000000480)="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", 0xff}], 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x80000000, 0xf9c7, 0x9, 0x8007, 0x4, 0x5, 0x1000}, 0x1c) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200101, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="c7a130b557598a030000000000000000851422e5f626163c00000012c16887f28b4f23e8adac8bff3217d0415ffef9d9335703c10bd66980b33c4529b74259195510d4d9900613b5d3539b5148eeda9ab848ecaf730921c0dc7f761b6696f4f6fceffe6d3f1f500529bd6f04ed573e", @ANYRES16=0x0, @ANYBLOB="620229bd7000ffdbdf2501000000000000000831000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f33189ea844faefdd81e49d700000000000000000000000000000000000000c5330d0000000000005b0ec4e03086b7dc2b2a4bc5de7b90cd4acf72b54221a6a7eb19192bedee7a29652e7acdfceb4e666672bd8b72f0fdd88f06d33d8672627b075fb87cb36b6e193123058bd0edc42e575fad9b189f6d5e52a0faad1dd7caf4"], 0x68}, 0x1, 0x0, 0x0, 0x40040}, 0x1) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3f00}, {0x1}]}) 01:11:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4004ae99, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000feff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:29 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb0, r2, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x199}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5c}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7b}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xbdc}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x140}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x488d4}, 0x4) dup3(r1, r0, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}}, 0x4000010) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7ff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x404c854) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:11:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x80ffff}, {0x1}]}) 01:11:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000340)=@req3={0x3f80, 0x0, 0x4, 0x0, 0x9, 0x6}, 0x1c) dup3(r5, r4, 0x0) connect$bt_rfcomm(r3, &(0x7f0000000080)={0x1f, @any, 0xfd}, 0xa) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={r6}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={r6, 0x5}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000200)={r7, @in6={{0xa, 0x4e20, 0x5, @private2, 0xf4c4}}}, 0x84) 01:11:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x40086602, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1000000}, {0x1}]}) 01:11:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x3c, 0x82200) accept4$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000180)=0x1c, 0x1c00) 01:11:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x40087602, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {0x1}]}) 01:11:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000008580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3000000}, {0x1}]}) 01:11:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {0x1}]}) 01:11:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae89, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x2, 0x2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:30 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) bind$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none}, 0xa) r3 = openat(r2, &(0x7f0000000040)='./file0\x00', 0x100, 0x90) accept4$x25(r3, &(0x7f0000000080)={0x9, @remote}, &(0x7f00000000c0)=0x12, 0x100800) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], &(0x7f0000000140)=0xf5) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = dup(r4) bind$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000180)={0x4, &(0x7f0000000100)=[{0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, &(0x7f00000002c0)={r6, &(0x7f00000001c0)=""/251}) 01:11:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000009580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5000000}, {0x1}]}) 01:11:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae8a, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:30 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000200)=""/151) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = dup(r4) bind$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r5, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r8 = dup3(r7, r6, 0x0) fcntl$notify(r6, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r8, 0xc0205647, &(0x7f0000000180)={0x9a0000, 0x6, 0x401, r3, 0x0, &(0x7f0000000140)={0xa10903, 0x8, [], @p_u16=&(0x7f0000000080)=0xffe1}}) 01:11:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000a580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae93, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6000000}, {0x1}]}) 01:11:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae9c, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7000000}, {0x1}]}) 01:11:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000b580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x40186366, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) syz_read_part_table(0x5, 0x3, &(0x7f0000000540)=[{&(0x7f0000000200)="ab72b008bc378fed670c2feab840150439f2b6eaed4d4590a37b127ba6ab6916d4a44a8229e0502da8be3e3890f5deec00f3960fc06669f3d3c475fe14aa797ba461b4f15328f5d38cebfdbdc6de6c2512929e4d823bb0cff503f2bdf2df53848879ca8817b719773a1bf8526ce98dc07cabd44a267f9b804adb4f9340875389e893fe9d53e2f0c1e73915b0bccce5ef0338c05d4de27f7a39c688bceb7967d37c70fc5ffc051b83ef4edda8540f0419e8f5a062950599958f24a3d6df8a2a89e4dadc87d870ea5ba1597f98a3b7dd7f94dd7e2524485661016c2295f2d6e717acabde61", 0xe4, 0x3}, {&(0x7f00000005c0)="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", 0x18d, 0x7fffffff}, {&(0x7f0000000480)="1d0c218b0fa1bfc6698a86585862834521d76231c14ee111af5356c6a8b2c9e0bdc2615a12e0322acdc16763c7a2eb35d0f798e8a3acae5873170549dd6a93d24acc74386bf5a9cdab15384dbc9646997b4626e51c5159d51a5b4244dee4284c397f03c35f0f5f7467494d6eec712a399641b276c20a77a6ea1460777772ed42bc8842a9c7a1bff375c8ae73fdf98e16603ce61704f122", 0x97, 0x2}]) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x1) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000480)={0x1c, r6, 0x1, 0x0, 0x0, {0xe}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="67b98436b68d513ed939ccd69678f3ca3be7bceb96caab6040d7ef171cb111e4d504e845b506e2a002cf937602f21aad334712b7bc737ddf474b8a8790d28f41127bce0fbe7d289b37fb67b30c6a120b52d1dcd48c11625c6052c846bd733fe3eccb53494ba800"/121, @ANYRES16=r6, @ANYBLOB="000229bd7000ffdbdf25020000000c0001800800030005000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4004085) socket$netlink(0x10, 0x3, 0x0) 01:11:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, {0x1}]}) 01:11:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000c580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:31 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x9, 0x7, 0x10012, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000140)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0xffff, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r3}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x220082, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @private=0xa010101}, 0x10) r5 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000080)={r6}) r7 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f0000000080)={r8}) dup2(r0, r2) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r10 = dup(r9) bind$bt_rfcomm(r10, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x80000}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000180)={r11}) 01:11:31 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20400, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0x8, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r2, r1, 0x0) getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = dup(r0) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000000)={0x1}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:11:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4020940d, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}, {0x1}]}) 01:11:32 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x9, 0x7, 0x10012, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000140)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0xffff, 0x3, 0x4, 0x40, r1}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r3}) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000080)={r5}) r6 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000080)={r7}) dup2(r0, r2) 01:11:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4040ae9e, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000d580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0xd) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) set_robust_list(&(0x7f0000000300)={0x0, 0x7, &(0x7f00000002c0)={&(0x7f0000000280)}}, 0x18) sendmsg$IPSET_CMD_HEADER(r6, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x50, 0xc, 0x6, 0x301, 0x0, 0x0, {0xc}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x20480c1) dup3(r6, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffff8000}, {0x1}]}) 01:11:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4040aea0, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:32 executing program 1: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) close(0xffffffffffffffff) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={r3}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={r3, 0x9}, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x9, 0x7, 0x10012, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000140)={r4}) r5 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0xffff, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000080)={r6}) r7 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f0000000080)={r8}) r9 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r9, 0xc01064b3, &(0x7f0000000080)={r10}) dup2(r1, r5) 01:11:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r6, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), 0x4) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:32 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x200, 0x0) ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000000)={0x0, 0x9}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:11:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}, {0x1}]}) 01:11:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000e580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:32 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x9, 0x7, 0x10012, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000140)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) bind$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$BLKPG(r4, 0x1269, &(0x7f00000000c0)={0x100, 0x3f, 0x74, &(0x7f0000000180)="00788efe08ad11c8ee0eea52ba8ce104e36935c17930f552813359b24a5a597e18f2f0870b0744487e53b90aad22109eed78393f78185d881497d03f7d756cd83bfbe2d6ddcb1a034e8b7ddece5cc4a822185a15ed2d5282d9e6c569f82034220901c7346888545f0028f911261a975ff8a2064a"}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0xffff, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r5}) r6 = syz_open_dev$dri(0x0, 0x0, 0x20a00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000080)={r7}) r8 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r8, 0xc01064b3, &(0x7f0000000080)={r9}) dup2(r0, r2) r10 = dup(0xffffffffffffffff) bind$bt_rfcomm(r10, &(0x7f0000000040)={0x1f, @none}, 0xa) execveat(r10, &(0x7f0000000200)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000240)=')\x00', &(0x7f0000000280)='-)!#\xe1%**\x00', &(0x7f00000002c0)='{\x81)@!\xba\x00', &(0x7f0000000300)='/dev/dri/card#\x00', &(0x7f0000000340)='/dev/dri/card#\x00', &(0x7f0000000380)='-\\/\x00'], &(0x7f00000004c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000440)='/dev/dri/card#\x00', &(0x7f0000000480)='-@\x00'], 0x1000) [ 3459.617827][T32707] validate_nla: 35 callbacks suppressed [ 3459.617836][T32707] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:11:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048ae9b, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) [ 3459.663031][T32707] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:11:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1}]}) [ 3459.704088][T32706] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) close(0xffffffffffffffff) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={r7}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000080)={r7, 0x4}, 0xfffffffffffffffe) socket$netlink(0x10, 0x3, 0x0) 01:11:33 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x9, 0x7, 0x10012, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000140)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) r3 = dup(0xffffffffffffffff) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000180)={0xdb44, 0x2a4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0xffff, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r4}) r5 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000080)={r6}) r7 = syz_open_dev$dri(0x0, 0x0, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r9 = dup(r8) bind$bt_rfcomm(r9, &(0x7f0000000040)={0x1f, @none}, 0xa) write$FUSE_IOCTL(r9, &(0x7f00000000c0)={0x20, 0xfffffffffffffff5, 0x5, {0x4, 0x0, 0x3, 0xfffffffc}}, 0x20) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f0000000080)={r10}) dup2(r0, r2) 01:11:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000f580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4068aea3, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x2]}, {0x1}]}) [ 3459.970191][T32749] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3460.038277][T32749] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3460.131930][T32762] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @any, 0xff}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000200)={'syz0', "a91db4e44479123de8fda4fe7b5dc75428a30683565d63fea6a906115f061911dcc005e0bd2b7b84b119d14769a994f3ae1739bc91aba7adbf2c415b72429e845184b68ac4af685996283c54815c6d182c1a6be57a2274c8e928c53e686020c9291dd462e06f08c1e960cec5406f3d1a5a3b5c57872545f7548addcdf4d664d34ee9149438ed40e23f02aa1413676c1f68"}, 0x95) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = dup(r6) bind$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000080)='+\x00') [ 3460.330010][T32762] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 3460.408779][ T314] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3460.456061][ T314] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:11:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x6) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, 0x0, 0xfffffffffffffffb, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000080)) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4080aea2, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x3]}, {0x1}]}) 01:11:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000010580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3461.677263][ T343] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:34 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x100000b, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) r2 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x60, 0x0, 0x90, [0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x20000003], 0x2, 0x0, &(0x7f0000000100)=[{0x2}, {}, {}]}, 0x108) keyctl$chown(0x4, 0x0, 0x0, 0x0) keyctl$revoke(0x3, 0x0) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r3, 0x0, 0x0) keyctl$revoke(0x3, r3) keyctl$search(0xa, 0x0, &(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x3}, r3) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000000)={0x200, 0x80000001, 0x72c2}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:11:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4080aebf, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x4]}, {0x1}]}) 01:11:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)="390000001320034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad0002000000000000060400000000000000009a894fc95d73903e8637b6387be8a503ee342b3be3519e761d6b94ccc4b2ca78c994c66263a9f5", 0x60}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r4, 0xffffffffffffffff, 0x80000) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303}, "481386ccfdd8daf7", "5d3099b6ace965cfa5fdb8ba2728bbe6dc50640a5b5613528cec58402c505f41", "f2671beb", '\b\x00'}, 0x38) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x1, 0xdd6) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$notify(r5, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:11:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000011580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3462.075962][ T373] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8211 sclass=netlink_route_socket pid=373 comm=syz-executor.4 01:11:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4090ae82, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x5]}, {0x1}]}) [ 3462.231747][ T373] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8211 sclass=netlink_route_socket pid=373 comm=syz-executor.4 01:11:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000012580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4138ae84, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x6]}, {0x1}]}) 01:11:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000013580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4188aea7, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x41a0ae8d, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x7]}, {0x1}]}) 01:11:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000014580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x300]}, {0x1}]}) 01:11:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4400ae8f, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000015580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x500]}, {0x1}]}) 01:11:37 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @none, 0x80}, 0xa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r1, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) bind$bt_rfcomm(r4, &(0x7f0000000040), 0xa) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r3, 0x4) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) [ 3464.721561][ T502] validate_nla: 9 callbacks suppressed [ 3464.721569][ T502] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x5000aea5, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) [ 3464.868784][ T502] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x600]}, {0x1}]}) 01:11:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x8004ae98, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000016580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x700]}, {0x1}]}) [ 3465.168673][ T545] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x80086301, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:38 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x99, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x5}, 0x4) [ 3465.327575][ T545] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x3f00]}, {0x1}]}) 01:11:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000017580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x80086601, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) [ 3465.623547][ T586] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x80ffff]}, {0x1}]}) [ 3465.759326][ T586] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x80087601, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000018580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x1000000]}, {0x1}]}) [ 3466.069949][ T632] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x8040ae9f, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) [ 3466.201491][ T632] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x2000000]}, {0x1}]}) 01:11:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000019580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x8080aea1, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) [ 3466.515107][ T664] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 3466.697406][ T664] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700001a580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x3000000]}, {0x1}]}) 01:11:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x8090ae81, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x8138ae83, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x4000000]}, {0x1}]}) 01:11:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700001b580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:40 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none}, 0xa) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9}}, 0x0, 0x0, r1, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) write$P9_RCREATE(r3, &(0x7f0000000100)={0x18, 0x73, 0x1, {{0x2, 0x0, 0x2}, 0x9}}, 0x18) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:11:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x5000000]}, {0x1}]}) 01:11:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x8188aea6, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700001c580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x6000000]}, {0x1}]}) 01:11:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x81a0ae8c, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x7000000]}, {0x1}]}) 01:11:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700001d580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x8400ae8e, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x3f000000]}, {0x1}]}) 01:11:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700001e580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x9000aea4, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0xfdfdffff]}, {0x1}]}) 01:11:41 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x41c1, 0x81088, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000002280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x28, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xf9, 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0xc011}, 0x810) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$USBDEVFS_DISCARDURB(r3, 0x550b, &(0x7f0000000000)=0x2) close(0xffffffffffffffff) ioctl$int_out(r3, 0x4, &(0x7f0000000080)) ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000000180)={{0x0, 0x0, 0x80}}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:11:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700001f580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc0045540, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0xffff8000]}, {0x1}]}) 01:11:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc0045878, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000020580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0xfffffdfd]}, {0x1}]}) 01:11:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc0045878, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1}]}) 01:11:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000021580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:42 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000000)={0x9, {{0x2, 0x4e20, @rand_addr=0x64010101}}}, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:11:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc008ae88, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x2]}, {0x1}]}) 01:11:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000022580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x3]}, {0x1}]}) 01:11:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc008ae91, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc008aec1, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000023580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x4]}, {0x1}]}) [ 3470.012065][ T988] validate_nla: 18 callbacks suppressed [ 3470.012074][ T988] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc0189436, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) [ 3470.227515][ T988] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x5]}, {0x1}]}) 01:11:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000024580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3470.581134][ T1034] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 3470.687714][ T1034] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000025580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc018ae85, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x6]}, {0x1}]}) [ 3471.027997][ T1052] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc020660b, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) [ 3471.137643][ T1052] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x7]}, {0x1}]}) 01:11:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000026580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc028ae92, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x300]}, {0x1}]}) [ 3471.431238][ T1093] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc080aebe, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) [ 3471.548140][ T1093] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xff, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={&(0x7f0000000180), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none}, 0xa) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x521002, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000136000/0x1000)=nil, 0x1000}, &(0x7f0000000100)=0x10) close(0xffffffffffffffff) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @none}, 0xa) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x3, 0xff, 0xb4, 0x2, 0x0, 0x5, 0x21200, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x424, 0x0, 0x9, 0xde2dba7916d9cb52, 0xc5ea, 0x40, 0x580}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) sendfile(r6, r4, 0x0, 0xf9b) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:11:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x500]}, {0x1}]}) 01:11:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000027580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x3, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) [ 3471.865891][ T1144] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x600]}, {0x1}]}) 01:11:45 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x4, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={&(0x7f0000000000)="08cb1c62133198af35d48d9e54a7a80b807f2b08aca62ac2", &(0x7f0000000040)=""/93, &(0x7f00000000c0)="04ed4be41d77df7a36d635e7bd2877a4929549a453cce4869caaeb9d09eb9599068bffd1b95e21e60a231952eb472f43c64be1d266b565226b7960459ddac35578eb61461e9e1db7756044d357fe96381006941f699e7a01a882", &(0x7f0000000480)="07faca670128c88be7f40b4956de7df25fe3ddef9dd291affc17bfbce0d176d0bb8f56259ec0b27f7c9bda86dccaaf4a0e06d9a1441dbb0d91a8ef0c8ed9a132d97c271bc98fb06cfc653e8fca07f88e01a6b37cd7c8f83d36a97479e3745b2085b13a4f5823fa8f0acb4cfdbd3404878c4c59f865d3dc53f91850dbeea376516774b5fc259b71cb38adf6d161daf063d9b489405050917cc2cb53120b785ff4d63f00e44af6ee6c7840", 0x6, r0}, 0x38) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r2, r1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, @can={0x1d, 0x0}, @in={0x2, 0x4e23, @multicast1}, @llc={0x1a, 0x205, 0x1, 0xcd, 0x2, 0x7f, @broadcast}, 0x6, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)='geneve1\x00', 0x2, 0x648, 0x9}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = dup(r4) bind$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f00000003c0)) sendmsg$can_raw(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x1d, r3}, 0x10, &(0x7f0000000340)={&(0x7f00000002c0)=@canfd={{0x3, 0x1, 0x0, 0x1}, 0x25, 0x3, 0x0, 0x0, "30c169f9c32b675ce72cd710408ebcac87005ae1bdf919c1ca21e0b80c8f00c70016368c1b8ef8f41d8019ec6b9819544add98eb4e02a1e70cc0832c2709abfa"}, 0x48}, 0x1, 0x0, 0x0, 0x40024}, 0x80) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) [ 3471.997526][ T1144] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x700]}, {0x1}]}) 01:11:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x4, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000028580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x3f00]}, {0x1}]}) 01:11:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x5, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000029580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x80ffff]}, {0x1}]}) 01:11:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffee5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:11:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x6, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700002a580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x1000000]}, {0x1}]}) 01:11:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x7, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x2000000]}, {0x1}]}) 01:11:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700002b580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x8, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x3000000]}, {0x1}]}) 01:11:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700002c580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x4000000]}, {0x1}]}) 01:11:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x10, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:47 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000000)={@local, @private=0xa010100}, 0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:11:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700002d580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x5000000]}, {0x1}]}) 01:11:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x15, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x6000000]}, {0x1}]}) 01:11:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x50, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700002e580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x7000000]}, {0x1}]}) 01:11:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700002f580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x3f000000]}, {0x1}]}) 01:11:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x2, [{0x40000001, 0x8, 0x3}, {0x1}]}) [ 3475.027557][ T1437] validate_nla: 15 callbacks suppressed [ 3475.027566][ T1437] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000030580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x3, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfdfdffff]}, {0x1}]}) [ 3476.390213][ T1469] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xffff8000]}, {0x1}]}) [ 3476.508965][ T1469] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x4, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:49 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10845, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x9c0000, 0xb34, 0x10000, r0, 0x0, &(0x7f00000000c0)={0x9909cb, 0x1, [], @p_u32=&(0x7f0000000080)}}) write$tun(r1, &(0x7f0000000180)={@void, @val={0x3, 0x0, 0x20, 0x58, 0x8, 0x1}, @x25={0x0, 0x68, 0x17, "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"}}, 0x100d) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040), 0xa) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x9) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:11:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000031580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffdfd]}, {0x1}]}) 01:11:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x5, [{0x40000001, 0x8, 0x3}, {0x1}]}) [ 3476.796019][ T1514] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 3476.917452][ T1514] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1}]}) 01:11:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000032580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x6, [{0x40000001, 0x8, 0x3}, {0x1}]}) [ 3477.130962][ T1556] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x2]}, {0x1}]}) 01:11:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x7, [{0x40000001, 0x8, 0x3}, {0x1}]}) [ 3477.243683][ T1556] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000033580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x3]}, {0x1}]}) 01:11:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x8, [{0x40000001, 0x8, 0x3}, {0x1}]}) [ 3477.476247][ T1595] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 3477.570386][ T1595] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x4]}, {0x1}]}) 01:11:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x300, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000034580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3477.859202][ T1635] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x5]}, {0x1}]}) 01:11:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x500, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x6]}, {0x1}]}) 01:11:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000035580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x7]}, {0x1}]}) 01:11:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x600, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000036580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x300]}, {0x1}]}) 01:11:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x700, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x500]}, {0x1}]}) 01:11:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0xff00, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000037580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x600]}, {0x1}]}) 01:11:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x80ffff, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x700]}, {0x1}]}) 01:11:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000038580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x1000000, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x3f00]}, {0x1}]}) 01:11:52 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) r2 = dup3(0xffffffffffffffff, r0, 0x80000) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r4, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1a, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000000000000000000000079500060000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x70) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x0, 0xfffffffffffffffe, &(0x7f0000000000)='GPL\x00', 0x80, 0x3f, &(0x7f0000000040)=""/63, 0x41100, 0x6, [], 0x0, 0x1d, r2, 0x8, &(0x7f0000000080)={0xa, 0x10001}, 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x9, 0x5e}, 0x10, r5, r6}, 0x78) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:11:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000039580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x80ffff]}, {0x1}]}) 01:11:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x2000000, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700003a580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x1000000]}, {0x1}]}) 01:11:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x3000000, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700003b580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x2000000]}, {0x1}]}) 01:11:53 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) [ 3480.191689][ T1901] validate_nla: 13 callbacks suppressed [ 3480.191698][ T1901] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x4000000, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x3000000]}, {0x1}]}) [ 3480.318321][ T1901] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700003c580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x4000000]}, {0x1}]}) 01:11:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x5000000, [{0x40000001, 0x8, 0x3}, {0x1}]}) [ 3480.564109][ T1937] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 3480.700553][ T1937] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x6000000, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700003d580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x5000000]}, {0x1}]}) 01:11:54 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none}, 0xa) write$P9_RREMOVE(r1, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7) [ 3480.963356][ T1974] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x6000000]}, {0x1}]}) [ 3481.108254][ T1974] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x7000000, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700003e580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x7000000]}, {0x1}]}) 01:11:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x8000000, [{0x40000001, 0x8, 0x3}, {0x1}]}) [ 3481.378411][ T2015] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 3481.530106][ T2015] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x3f000000]}, {0x1}]}) 01:11:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0xfdfdffff, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700003f580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3481.800953][ T2053] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0xff000000, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xfdfdffff]}, {0x1}]}) [ 3481.947901][ T2053] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000040580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:55 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x41002, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000000), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @none}, 0xa) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r4}}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{{0x2, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x0, 0x1}, {0x4, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x3, 0x1}}], 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:11:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0xffff8000, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xffff8000]}, {0x1}]}) 01:11:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000041580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0xfffffdfd, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:11:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xfffffdfd]}, {0x1}]}) 01:11:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000042580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x7, 0x8, 0x3}, {0x1}]}) 01:11:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x2}]}) 01:11:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xa, 0x8, 0x3}, {0x1}]}) 01:11:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000043580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x3}]}) 01:11:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:11:56 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x86c0, 0x0, 0xfffffffe}, 0x0, 0xb, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none}, 0xa) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{}, {0x0}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000080)={r4, 0x19}) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:11:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x5}]}) 01:11:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000044580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000002, 0x8, 0x3}, {0x1}]}) 01:11:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x7}]}) 01:11:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000045580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000003, 0x8, 0x3}, {0x1}]}) 01:11:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0xa}]}) 01:11:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000005, 0x8, 0x3}, {0x1}]}) 01:11:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000046580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:57 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x2a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x44004) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:11:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0xd}]}) 01:11:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000007, 0x8, 0x3}, {0x1}]}) 01:11:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000047580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x4000000a, 0x8, 0x3}, {0x1}]}) 01:11:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x15}]}) 01:11:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x4000000d, 0x8, 0x3}, {0x1}]}) 01:11:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000048580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:57 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) r2 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$HIDIOCGRDESC(r2, 0x90044802, &(0x7f0000000180)={0xa4a, "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"}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:11:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x500}]}) 01:11:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000010, 0x8, 0x3}, {0x1}]}) 01:11:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000049580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x40000001}]}) 01:11:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000015, 0x8, 0x3}, {0x1}]}) 01:11:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700004a580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:11:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x80000008}]}) [ 3485.463345][ T2429] validate_nla: 20 callbacks suppressed [ 3485.463354][ T2429] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000500, 0x8, 0x3}, {0x1}]}) 01:11:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0xffffff1f}]}) [ 3485.678752][ T2429] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:11:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x4000ff00, 0x8, 0x3}, {0x1}]}) 01:11:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700004b580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3486.054653][ T2483] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 3486.228248][ T2483] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700004c580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1}]}) 01:12:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x80000008, 0x8, 0x3}, {0x1}]}) [ 3487.062666][ T2502] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x7, 0x3}, {0x1}]}) 01:12:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x2}]}) [ 3487.170038][ T2502] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:00 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @none}, 0xa) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r3, r2, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x108, r4, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10044c06}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x327}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbd}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_to_batadv\x00'}}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x8844}, 0x2000c800) 01:12:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700004d580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x10, 0x3}, {0x1}]}) 01:12:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x3}]}) [ 3487.507238][ T2548] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x15, 0x3}, {0x1}]}) [ 3487.639788][ T2548] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x4}]}) 01:12:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700004e580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x7ffff, 0x3}, {0x1}]}) 01:12:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x5}]}) [ 3488.045264][ T2595] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 3488.218250][ T2595] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x20000288, 0x3}, {0x1}]}) 01:12:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x6}]}) 01:12:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700004f580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3488.481245][ T2546] tipc: MTU too low for tipc bearer [ 3488.613157][ T2642] tipc: MTU too low for tipc bearer 01:12:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x2}, {0x1}]}) 01:12:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x7}]}) 01:12:01 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x8000, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x5, 0x5, 0x800}}, 0x28) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) getpeername$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0x10) 01:12:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000050580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x10}, {0x1}]}) 01:12:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x300}]}) 01:12:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x15}, {0x1}]}) 01:12:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000051580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x500}]}) 01:12:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:12:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000052580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x600}]}) 01:12:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x2}, {0x1}]}) 01:12:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000053580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000054580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x700}]}) 01:12:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x3}, {0x1}]}) 01:12:04 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffff7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x0, 'ip6gretap0\x00', {0x1}, 0x1f}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) [ 3491.221275][ T2797] validate_nla: 10 callbacks suppressed [ 3491.221357][ T2797] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x4}, {0x1}]}) 01:12:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x3f00}]}) [ 3491.470751][ T2797] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x5}, {0x1}]}) 01:12:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000055580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x80ffff}]}) [ 3491.778659][ T2846] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x6}, {0x1}]}) [ 3491.976104][ T2846] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x1000000}]}) 01:12:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x7}, {0x1}]}) 01:12:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000056580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x2000000}]}) 01:12:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x8}, {0x1}]}) [ 3492.375412][ T2893] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 3492.528541][ T2893] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000057580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x3000000}]}) 01:12:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x300}, {0x1}]}) 01:12:06 executing program 0: mmap(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x4, 0x10010, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r0, 0xffffffffffffffff, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x80}, 0x1, 0x0, 0x0, 0x440c5}, 0x8000) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0xd27, 0x2aa, 0x6, 0x5, 0x7}, 0x14) close(0xffffffffffffffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) futimesat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{r4, r5/1000+60000}, {r6, r7/1000+10000}}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) [ 3493.375818][ T2926] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x500}, {0x1}]}) 01:12:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x4000000}]}) [ 3493.529290][ T2926] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000058580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x600}, {0x1}]}) 01:12:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x5000000}]}) [ 3493.776082][ T2966] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 3493.898305][ T2966] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x700}, {0x1}]}) 01:12:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000059580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:07 executing program 0: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) mmap(&(0x7f0000af4000/0x3000)=nil, 0x3000, 0x2, 0x13, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x10080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8015}, 0x2000c0c0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r4, r3, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:12:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x6000000}]}) 01:12:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0xff00}, {0x1}]}) 01:12:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700005a580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x7000000}]}) 01:12:07 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0xc, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:12:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x80ffff}, {0x1}]}) 01:12:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x3f000000}]}) 01:12:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700005b580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x1000000}, {0x1}]}) 01:12:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0xfdfdffff}]}) 01:12:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x2000000}, {0x1}]}) 01:12:08 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x6000, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={r3}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r3, 0x401}, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x24) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:12:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700005c580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0xffff8000}]}) 01:12:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x3000000}, {0x1}]}) 01:12:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0xfffffdfd}]}) 01:12:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700005d580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x4000000}, {0x1}]}) 01:12:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1}]}) 01:12:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x5000000}, {0x1}]}) 01:12:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700005e580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x2}]}) 01:12:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x6000000}, {0x1}]}) [ 3496.250029][ T3214] validate_nla: 11 callbacks suppressed [ 3496.250038][ T3214] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x7000000}, {0x1}]}) 01:12:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x3}]}) 01:12:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700005f580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3497.570371][ T3264] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x4}]}) 01:12:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x8000000}, {0x1}]}) [ 3497.678188][ T3264] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000060580200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:11 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6, 0x10010, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000876000/0x4000)=nil, 0x4000, 0x200000d, 0x3f, 0x80000) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000eb9000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x1, 0x10000000002) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @default, @netrom, @netrom, @default, @bcast, @default, @default]}, &(0x7f0000000180)=0x48) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = dup2(r2, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r2, r1, 0x0) listen(r2, 0x1) 01:12:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0xfdfdffff}, {0x1}]}) [ 3497.899031][ T3312] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x5}]}) 01:12:11 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r0, r0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) [ 3498.017747][ T3312] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000400300000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0xff000000}, {0x1}]}) 01:12:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x6}]}) [ 3498.272995][ T3354] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000ffff0300000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0xffff8000}, {0x1}]}) 01:12:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x7}]}) [ 3498.668684][ T3383] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 3498.847945][ T3383] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0xfffffdfd}, {0x1}]}) 01:12:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x300}]}) [ 3499.160067][ T3434] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:12:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x500}]}) [ 3499.317610][ T3434] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x600}]}) 01:12:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000034000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x2}, {0x1}]}) 01:12:13 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = dup3(r1, r0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000), 0x4) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RSTATFS(r2, &(0x7f0000000040)={0x43, 0x9, 0x2, {0x40, 0x7, 0x80000001, 0x6, 0x4, 0xcdc, 0x0, 0x8}}, 0x43) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:12:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x700}]}) 01:12:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x3}, {0x1}]}) 01:12:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000fffff000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x4}, {0x1}]}) 01:12:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x3f00}]}) 01:12:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000000001000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x80ffff}]}) 01:12:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x5}, {0x1}]}) [ 3501.299610][ T3550] validate_nla: 5 callbacks suppressed [ 3501.299619][ T3550] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:14 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) r2 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000000), 0x80000) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000040)=0x8, 0x4) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r3, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000080)={{0x2, 0x0, @descriptor="732ccba1d39bd0b4"}}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:12:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x1000000}]}) 01:12:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x6}, {0x1}]}) 01:12:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000fffd0801000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3501.614199][ T3592] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x7}, {0x1}]}) 01:12:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x2000000}]}) [ 3501.778194][ T3592] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x8}, {0x1}]}) 01:12:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000000002000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x3000000}]}) 01:12:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x300}, {0x1}]}) [ 3502.175266][ T3633] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:15 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000041c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) dup3(0xffffffffffffffff, r1, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:12:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x4000000}]}) [ 3502.288660][ T3633] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x500}, {0x1}]}) 01:12:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000000003000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x5000000}]}) [ 3502.582978][ T3680] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x600}, {0x1}]}) [ 3502.701504][ T3680] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000000004000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x6000000}]}) 01:12:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x700}, {0x1}]}) [ 3502.984184][ T3714] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x7000000}]}) [ 3503.108289][ T3714] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000000005000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0xff00}, {0x1}]}) 01:12:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x3f000000}]}) 01:12:16 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) tkill(r1, 0x2e) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) [ 3503.336193][ T3750] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x80ffff}, {0x1}]}) 01:12:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0xfdfdffff}]}) 01:12:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000000006000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x1000000}, {0x1}]}) 01:12:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0xffff8000}]}) 01:12:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:17 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x0, 0x3, 0xa818}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup(0xffffffffffffffff) mmap$perf(&(0x7f000087b000/0x4000)=nil, 0x4000, 0x2000002, 0x110, r2, 0x400) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) connect$ax25(r0, &(0x7f00000000c0)={{0x3, @null, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast]}, 0x48) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000080)=0x6) 01:12:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0xfffffdfd}]}) 01:12:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x2000000}, {0x1}]}) 01:12:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1}]}) 01:12:17 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40200, 0x80) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:12:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x3000000}, {0x1}]}) 01:12:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x2}]}) 01:12:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025808000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x4000000}, {0x1}]}) 01:12:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x3}]}) 01:12:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000000009000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x5000000}, {0x1}]}) 01:12:18 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000000)={0x3, 0x101, 0x2, {0x8, 0xd89a, 0x8, 0x5}}) 01:12:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x4}]}) 01:12:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x6000000}, {0x1}]}) 01:12:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025809000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x5}]}) 01:12:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x7000000}, {0x1}]}) 01:12:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x9, 0x7, 0x10012, 0x101, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000140)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0xffff, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r3}) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000080)={r5}) r6 = syz_open_dev$dri(0x0, 0x0, 0x4100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000080)={r7}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r9 = dup(r8) bind$bt_rfcomm(r9, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r9, 0xc01064b3, &(0x7f00000000c0)={r5}) dup2(r0, r2) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x54, 0x0, 0x401, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc}, {0xc, 0x8f}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="44000600", @ANYRES16=0x0, @ANYBLOB="000825bd7000ffdbdf25410400000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8800) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) 01:12:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000000000a000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x6}]}) 01:12:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x8000000}, {0x1}]}) 01:12:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x7}]}) 01:12:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000002580a000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3506.410510][ T4072] validate_nla: 15 callbacks suppressed [ 3506.410519][ T4072] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 3506.498686][ T4072] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = dup(r6) bind$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000080)={0x100, 0x0, 0x2, 0x9}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000180)={0x40000004f0, r8}) socket$netlink(0x10, 0x3, 0x0) 01:12:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0xfdfdffff}, {0x1}]}) 01:12:19 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) sendto$inet(r0, &(0x7f00000001c0)="3e6a23fa20965fad21673c9789d5a473ab84e07e55c328fddf2974086a43168346e76cbd0106d7de0d597dac755824683077a018fc44c9fe496a535a87b84b15e12acfe4780c35d31cbbfd6f0ee5c9a6f479a8fe90eb9a16f1599dbd750032", 0x5f, 0x11, &(0x7f0000000240)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x80800) ioctl$SNDCTL_DSP_NONBLOCK(r2, 0x500e, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'security.', '@}&!\x00'}, &(0x7f0000000080)=""/149, 0x95) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:12:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x300}]}) 01:12:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000002580b000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x9, 0x7, 0x10012, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000140)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0xffff, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r3}) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x1ff, 0x3, 0x10002, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000080)={r5}) r6 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x4}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r7) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000480)) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r9 = dup(r8) bind$bt_rfcomm(r9, &(0x7f0000000040)={0x1f, @none}, 0xa) execveat(r9, &(0x7f00000000c0)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000180)='/dev/dri/card#\x00', &(0x7f0000000500)='*/^:\x00', &(0x7f0000000200)='/dev/dri/card#\x00', &(0x7f0000000240)='/dev/dri/card#\x00', &(0x7f0000000280)='\x00'/15, &(0x7f00000002c0)='/dev/dri/card#\x00', &(0x7f0000000300)='/dev/dri/card#\x00', &(0x7f0000000340)='/dev/dri/card#\x00', &(0x7f0000000540)='/dev/dri/card#\x00'], &(0x7f00000005c0)=[&(0x7f0000000600)='\x05\x84`\x05f\x13\xb6\xc9\x1a\xac\x99:\x8a\x97\xed}\xb4\xf9\x048\xfc\a\xf7\x1d{\xcd\x94\xa7\xaeL\xe1\x96\x9e\xbe\xc2d\x98\x1c\xaa\x86\xa50\xbe\xd2\xfe\xde\x04\xf8\x91\x1d\x88Z\xd4\xb5^\xa5\xab\x9a\xe2\x8b\xb7\x85\x1aB;\x9dm\xfevdEX\xfcH\x1fk\xdc\x9f\x8d\x1a\xb2\x9e\xf7UO\xf3\f\xb4\x14\xb5\x03-\x9fl\xe2}\xfd\xc0\x83]a\xfd\xf4I\xf6)\xea\xfa\x06_\xe7\xe0!\x03\xb3J2\xcd\x17\xea~\t.\xd1\x92\x17n\xfdeX\x14\xe7\xd8X\xe6[L2\x1b\xc1\xdf>E\x8b\x11\xb8\xec\xf4\xaa\xf5\x00\x00\x00\x00\x00', &(0x7f00000006c0)='/dev/dr\x96\xb0\x11\xdcrd#\x00\x8f=2\xc8\x9d\x0f\xca6Wu+\xd6\x0f\x9a$\x90\x10\xc4s\n\x11VZ\x98\xf69\x18\xd2f\x83=\x03\xe1.\xbc\x06\x00\x00\x00*\x14\xe1\x83\xee\xed\xd9-\xa5\xd9\x16U\x9d\xd1\xe3A\xc1!\n\xd7\xa6\xebUY\xd4\xce3b\xccX`\x04\xdbhV\x95\x81\x15\xc4\xdb?%\x06\xde\xa7q\xb1`B\xbbZ\xd1\xf9\xe61\xf4>\x87$\xc7_4\xa5R?\'\x8c7k\x9c\xed\xccU\xda+\xd1^\xc1\"|n\x8b\xbc\xda^\x1bP&h\xee\x1dw*\x18Su\xd7\xd1\x9f\xb6d\x81+\x9b\xaa\xde\xbb\xdc\xdd\xb6\xf7\xddm`\xe3\nu\x0053-n\xb5\xb7t\x8e3[y\x7fB\xcd\x03\x8f\xd8ZGD', &(0x7f00000004c0)='/dev/dri/card#\x00', &(0x7f0000000380)='\xcc\x84\t\xa809\x15]\x00\x00\x00\x00@\x06\x00', &(0x7f00000008c0)='/dev/dri/card#\x00\xa3\xb2\xc2\xdf\x8eT\xaf\xb7\xa18\xf0\a\x82\xf2sFWIT\x01\xe6\xf5\xaap\xf1\x1b:i9!\x10\f_\xb0=}<&\x84\x92\xe9\xc3N7H\xe3\xc0\xcc\xe9\xbav\xb2\x1b\x9cF4\x91.|I=\f\xad-\xb1\x0f\x1d\xe3k\xcfV/\xddc1\xac4\xd0|\x95A\xfe\x97\xe9\x18)y\xe34\x9f\xc4f\x92\xba\xd2\x01\x81\x0eS\x95\x8f\r\xd8\xc6\xd8\xe8\xdd\t\x8b|\xb0`\x99\x92\x06\f\x04g\xf4\x1c1\xca\xa4\xfd\xa3R\xad\x80\x8f\x87\x0e\xb5\x0e\x16\xa1\x81N\xf7\xbe\xde\x86\xd4\xc7\xf3<\x96\xe3\xb4}\xb8\'\x01\x16\x82\xf6\x9c\x9d\x90\xca\xe0\f', &(0x7f0000000580)='&]\x00'], 0x400) dup2(r0, r2) setsockopt$inet6_group_source_req(r9, 0x29, 0x2c, &(0x7f0000000780)={0x8, {{0xa, 0x4e22, 0xffffffff, @remote, 0x40}}, {{0xa, 0x4e23, 0x1, @empty, 0xfffffffc}}}, 0x108) [ 3506.817891][ T4095] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0xff000000}, {0x1}]}) 01:12:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x500}]}) 01:12:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x9, 0x7, 0x10012, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000140)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80000001, 0x9, 0x4, 0x6, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r3}) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000080)={r5}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r4, 0x6430) r6 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x4, 0x0, 0x0}) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0xda22) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000080)={r7}) dup2(r0, r2) [ 3506.957768][ T4091] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3506.992846][ T4091] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3507.079102][ T4095] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x600}]}) 01:12:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000100)={0x401, 0x73, "b4b5e31a510b32c7b1590d3d600a061ced45ec031b9f6c29db80eb925831ff26572dc85316c0ec95c41c04a3937eb7c5e1331a396f61e861ff9cb032b48c5acb89f8e954cbf8b77f1f9f8e31f0191334c719d9b01ede78334769521c703d68a53f49c452eb4f98b8697e6abe1d07088b8dc85b"}) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x11, 0x2, 0x2) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r6, 0xffffffffffffffff, 0x0) accept4$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10, 0x800) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:12:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000000000c000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0xffff8000}, {0x1}]}) 01:12:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x9, 0x7, 0x10012, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000140)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0xffff, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r3}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0x13c, r4, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4a}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x53}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x3f, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x65fc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40}, 0x44014) r5 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000080)={r6}) r7 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f0000000080)={r8}) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x8000, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r9, 0x54a0) dup2(r0, r2) [ 3507.320270][ T4142] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3507.426018][ T4151] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 3507.548829][ T4142] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 3507.587918][ T4151] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000002580c000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x700}]}) 01:12:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0xfffffdfd}, {0x1}]}) 01:12:21 executing program 4: socket$netlink(0x10, 0x3, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) bind$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @fixed={[], 0x10}}, 0xa) io_uring_enter(r2, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x9}}, 0x20) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = dup(r5) bind$bt_rfcomm(r6, &(0x7f0000000040)={0x1f, @none}, 0xa) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futimesat(r6, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={{r7, r8/1000+10000}, {0x0, 0xea60}}) dup3(r4, r3, 0x0) fcntl$notify(r3, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:12:21 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x8, 0x0, 0x3, 0x0, 0x0, 0x41c1, 0x2060, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x80, 0x0, 0x8}, 0x0, 0x10, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, &(0x7f0000000480)="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") dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x7, 0x1c1001) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0xffff}, 0x8) 01:12:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x3f00}]}) 01:12:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:12:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = dup(r4) bind$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @none}, 0xa) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x521740, 0x0) fanotify_mark(r5, 0x0, 0x8001004, r6, &(0x7f0000000140)='./file0\x00') r7 = socket(0x1d, 0x800, 0x8) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r8, r7, 0x0) fcntl$notify(r7, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x2) 01:12:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x80ffff}]}) 01:12:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x2}, {0x1}]}) 01:12:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000002580d000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r3, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) fcntl$notify(r4, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000040240006050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB='4\x00\x00\x00d\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0000000000000015727376700000020020000000"], 0x34}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@multicast1, @dev={0xac, 0x14, 0x14, 0x35}, r6}, 0xc) 01:12:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x3}, {0x1}]}) 01:12:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x1000000}]}) 01:12:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000000000e000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000000240)) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001340)=ANY=[@ANYBLOB='\x00\x00\x00\b', @ANYRES16=r3, @ANYBLOB="1100000000000000000001000000"], 0x14}}, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44801}, 0x20000040) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = dup(r4) bind$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @none}, 0xa) io_uring_enter(r5, 0x5, 0x7, 0x1, &(0x7f0000000100)={[0x2fa]}, 0x8) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x21, 0x80000, 0x9869) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r7, r6, 0x0) fcntl$notify(r6, 0x402, 0x25) socket$netlink(0x10, 0x3, 0x0) 01:12:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x4}, {0x1}]}) 01:12:21 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={r3}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000000c0)={r3, 0xfff}, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'U+', 0x100000000}, 0x16, 0x3) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = dup(r5) bind$bt_rfcomm(r6, &(0x7f0000000040)={0x1f, @none}, 0xa) write$9p(r6, &(0x7f0000000180)="182fd1cea985e1fd8b79acbb0a42a164b23c0bee60cf7b5e0142540f0e862100d53cd7b2939cb4085f89a6251424f20531be197891f646e33cfd4073011b6b47991ae56197f21b5c2cddff8197726696072e30c5c3ac9b568f29acee03510e831b2cff4f41", 0x65) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:12:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x2000000}]}) 01:12:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000002580e000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:22 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) sendto$inet(r0, &(0x7f00000001c0)="3e6a23fa20965fad21673c9789d5a473ab84e07e55c328fddf2974086a43168346e76cbd0106d7de0d597dac755824683077a018fc44c9fe496a535a87b84b15e12acfe4780c35d31cbbfd6f0ee5c9a6f479a8fe90eb9a16f1599dbd750032", 0x5f, 0x11, &(0x7f0000000240)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x80800) ioctl$SNDCTL_DSP_NONBLOCK(r2, 0x500e, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'security.', '@}&!\x00'}, &(0x7f0000000080)=""/149, 0x95) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:12:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x5}, {0x1}]}) 01:12:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x3000000}]}) 01:12:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000fffcf80e000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x6}, {0x1}]}) 01:12:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x4000000}]}) 01:12:22 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x6000, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={r3}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r3, 0x401}, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x24) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:12:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x7}, {0x1}]}) 01:12:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000000000f000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:23 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) getsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) 01:12:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x5000000}]}) 01:12:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x8}, {0x1}]}) 01:12:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000002580f000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x6000000}]}) 01:12:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x300}, {0x1}]}) 01:12:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x7000000}]}) 01:12:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x500}, {0x1}]}) 01:12:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x600}, {0x1}]}) [ 3511.886991][ T4481] validate_nla: 18 callbacks suppressed [ 3511.887000][ T4481] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 3512.059594][ T4481] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:25 executing program 4: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) mmap(&(0x7f0000af4000/0x3000)=nil, 0x3000, 0x2, 0x13, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x10080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8015}, 0x2000c0c0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r4, r3, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:12:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x3f000000}]}) 01:12:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x700}, {0x1}]}) 01:12:25 executing program 0: socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x31, r1, 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x34, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x10) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:12:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000000010000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3512.414670][ T4500] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:25 executing program 4: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) mmap(&(0x7f0000af4000/0x3000)=nil, 0x3000, 0x2, 0x13, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x10080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8015}, 0x2000c0c0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r4, r3, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:12:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0xfdfdffff}]}) 01:12:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0xff00}, {0x1}]}) [ 3512.568278][ T4500] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:25 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f00000000c0)={0x7, {0x0, 0x4, 0xfff, 0x8}}) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) bind$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x4, 0x9, 0x4, 0x70000, 0x8, {0x77359400}, {0x1, 0x8, 0xf, 0x1f, 0x3f, 0x4, "bb248f16"}, 0x0, 0x3, @planes=&(0x7f0000000000)={0x10000, 0x401, @mem_offset=0x200, 0x7}, 0x81, 0x0, r2}) 01:12:25 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) r2 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$HIDIOCGRDESC(r2, 0x90044802, &(0x7f0000000180)={0xa4a, "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"}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:12:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025810000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0xffff8000}]}) 01:12:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x80ffff}, {0x1}]}) [ 3512.901809][ T4555] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0xfffffdfd}]}) [ 3513.109166][ T4555] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x1000000}, {0x1}]}) 01:12:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000fffcf810000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1}]}) [ 3513.486841][ T4610] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x2000000}, {0x1}]}) [ 3513.688653][ T4610] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x2}]}) 01:12:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x3000000}, {0x1}]}) 01:12:27 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x41c1, 0x8228a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, r0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:12:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025811000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x3}]}) 01:12:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x4000000}, {0x1}]}) [ 3514.557856][ T4664] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x4}]}) 01:12:27 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000666000/0x2000)=nil, 0x2000, 0xc297a472883fdc1a, 0x2, 0xffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000180)={0x7fff, {{0x2, 0x4e21, @empty}}, {{0x2, 0x4e22, @broadcast}}}, 0x108) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x9c0000, 0x20, 0x7fff, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980914, 0xaf, [], @p_u32=&(0x7f0000000000)=0x2}}) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f00000000c0)={0x3, 0x10000}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:12:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x5000000}, {0x1}]}) 01:12:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) [ 3514.747606][ T4664] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000000012000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:28 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x8) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r4, 0x0, 0x0) keyctl$revoke(0x3, r4) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000000)='%:)+\xa0[^,\x00', &(0x7f0000000080)) 01:12:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x5}]}) 01:12:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x6000000}, {0x1}]}) 01:12:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x6}]}) 01:12:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025812000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x7000000}, {0x1}]}) 01:12:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x7}]}) 01:12:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x8000000}, {0x1}]}) 01:12:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025813000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000000014000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x300}]}) 01:12:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0xfdfdffff}, {0x1}]}) 01:12:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:29 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x500}]}) 01:12:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0xff000000}, {0x1}]}) 01:12:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025814000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x600}]}) 01:12:29 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0xffff8000}, {0x1}]}) 01:12:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x700}]}) 01:12:30 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) [ 3516.917964][ T4879] validate_nla: 9 callbacks suppressed [ 3516.917980][ T4879] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0xfffffdfd}, {0x1}]}) 01:12:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025815000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:30 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x3f00}]}) [ 3517.204800][ T4920] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:30 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x80ffff}]}) 01:12:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) [ 3517.348166][ T4920] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:30 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025816000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x1000000}]}) 01:12:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x2}, {0x1}]}) 01:12:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) [ 3517.648303][ T4970] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x2000000}]}) [ 3517.767571][ T4970] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x3}, {0x1}]}) 01:12:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025817000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) [ 3517.985987][ T5012] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x3000000}]}) 01:12:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x4}, {0x1}]}) [ 3518.138271][ T5012] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:31 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025818000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x4000000}]}) 01:12:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x5}, {0x1}]}) 01:12:31 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) [ 3518.373949][ T5049] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 3518.467906][ T5049] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:31 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x5000000}]}) 01:12:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x6}, {0x1}]}) 01:12:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025819000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) [ 3518.742601][ T5089] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x6000000}]}) 01:12:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x1}]}) 01:12:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x7000000}]}) 01:12:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000002581a000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x8}, {0x1}]}) 01:12:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x3f000000}]}) 01:12:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x300}, {0x1}]}) 01:12:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0xfdfdffff}]}) 01:12:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000002581b000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x500}, {0x1}]}) 01:12:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0xffff8000}]}) 01:12:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x600}, {0x1}]}) 01:12:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000002581c000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x700}, {0x1}]}) 01:12:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0) 01:12:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0xfffffdfd}]}) 01:12:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0xff00}, {0x1}]}) 01:12:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0) 01:12:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1}]}) 01:12:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000002581d000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x80ffff}, {0x1}]}) 01:12:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0) 01:12:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x2}]}) 01:12:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000002581e000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x1, 0x0, [{0xd, 0x8, 0x3}]}) 01:12:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x1000000}, {0x1}]}) 01:12:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x3}]}) 01:12:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x1, 0x0, [{0xd, 0x8, 0x3}]}) 01:12:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x2000000}, {0x1}]}) 01:12:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000002581f000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x1, 0x0, [{0xd, 0x8, 0x3}]}) 01:12:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}) 01:12:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x3000000}, {0x1}]}) 01:12:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000000020000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {}]}) 01:12:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x4000000}, {0x1}]}) 01:12:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x5}]}) 01:12:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {}]}) 01:12:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025820000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x5000000}, {0x1}]}) 01:12:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {}]}) 01:12:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}]}) 01:12:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025821000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x6000000}, {0x1}]}) 01:12:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x1, 0x0, [{0x1}]}) 01:12:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x7}]}) [ 3522.012187][ T5486] validate_nla: 17 callbacks suppressed [ 3522.012196][ T5486] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x7000000}, {0x1}]}) 01:12:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x1, 0x0, [{0x1}]}) 01:12:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x300}]}) [ 3522.198650][ T5486] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x1, 0x0, [{0x1}]}) 01:12:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025822000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x8000000}, {0x1}]}) 01:12:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x500}]}) [ 3522.499571][ T5545] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x0, 0x8, 0x3}, {0x1}]}) 01:12:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0xfdfdffff}, {0x1}]}) 01:12:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x600}]}) 01:12:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x0, 0x8, 0x3}, {0x1}]}) 01:12:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0xff000000}, {0x1}]}) [ 3522.862172][ T5545] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x0, 0x8, 0x3}, {0x1}]}) 01:12:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x700}]}) 01:12:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0xffff8000}, {0x1}]}) 01:12:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025823000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x3f00}]}) 01:12:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x0, 0x3}, {0x1}]}) [ 3523.138463][ T5621] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0xfffffdfd}, {0x1}]}) [ 3523.277217][ T5621] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x0, 0x3}, {0x1}]}) 01:12:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x80ffff}]}) 01:12:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x3, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x9, 0x7, 0x10012, 0x0, r1}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000140)={r2}) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0xffff, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000080)={r4}) r5 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x4, 0x0, 0x0}) r7 = socket(0x1e, 0x4, 0x0) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r8, r7, 0x0) setsockopt$inet_udp_int(r7, 0x11, 0x1, &(0x7f0000000180)=0x8, 0x4) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000080)={r6}) r9 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r9, 0xc01064b3, &(0x7f0000000080)={r10}) dup2(r0, r3) 01:12:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000000324000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:12:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x0, 0x3}, {0x1}]}) 01:12:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x9, 0x7, 0x10012, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000140)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) sync() ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0xffff, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r3}) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000080)={r5}) r6 = syz_open_dev$dri(0x0, 0x0, 0x0) r7 = socket(0x1e, 0x4, 0x0) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r8, r7, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r8, 0x10e, 0x8, &(0x7f00000000c0)=0x9, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000080)={r9}) dup2(r0, r2) [ 3523.593474][ T5679] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000}]}) 01:12:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x2]}, {0x1}]}) [ 3523.768178][ T5679] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:12:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025824000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x3]}, {0x1}]}) 01:12:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x2000000}]}) 01:12:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) [ 3524.057579][ T5736] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 3524.200871][ T5736] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x4]}, {0x1}]}) 01:12:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x3000000}]}) 01:12:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:12:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025825000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x5]}, {0x1}]}) 01:12:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x4000000}]}) 01:12:37 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none}, 0xa) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9}}, 0x0, 0x0, r1, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) write$P9_RCREATE(r3, &(0x7f0000000100)={0x18, 0x73, 0x1, {{0x2, 0x0, 0x2}, 0x9}}, 0x18) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:12:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025826000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x6]}, {0x1}]}) 01:12:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x5000000}]}) 01:12:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x7]}, {0x1}]}) 01:12:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025827000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6000000}]}) 01:12:38 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r2, r1, 0x0) sendfile(r0, r2, &(0x7f0000000000)=0x1000, 0x758) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r4, r3, 0x0) dup3(r4, 0xffffffffffffffff, 0x80000) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:12:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x8]}, {0x1}]}) 01:12:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x7000000}]}) 01:12:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025828000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x300]}, {0x1}]}) 01:12:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x3f000000}]}) 01:12:38 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)) 01:12:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025829000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x500]}, {0x1}]}) 01:12:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}]}) 01:12:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x600]}, {0x1}]}) 01:12:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000002582a000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xffff8000}]}) 01:12:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x700]}, {0x1}]}) 01:12:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}]}) 01:12:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000002582b000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0xff00]}, {0x1}]}) 01:12:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1}]}) 01:12:39 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x0, 0x5, 0x1, 0x101, 0x6, "eb4763ae3d42e4a14badd313b52067fbff2987"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) close(0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r2, 0x0, 0x0) keyctl$revoke(0x3, r2) keyctl$set_timeout(0xf, r2, 0x400) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:12:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000002582c000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x80ffff]}, {0x1}]}) [ 3527.057728][ T6038] validate_nla: 15 callbacks suppressed [ 3527.057736][ T6038] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) 01:12:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x1000000]}, {0x1}]}) 01:12:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000002582d000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) [ 3527.400407][ T6073] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x2000000]}, {0x1}]}) [ 3527.545125][ T6073] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}) 01:12:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000002582e000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x3000000]}, {0x1}]}) [ 3527.875731][ T6114] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}]}) [ 3528.065040][ T6114] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:41 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x0, 0x5, 0x1, 0x101, 0x6, "eb4763ae3d42e4a14badd313b52067fbff2987"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) close(0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r2, 0x0, 0x0) keyctl$revoke(0x3, r2) keyctl$set_timeout(0xf, r2, 0x400) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:12:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x4000000]}, {0x1}]}) 01:12:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}]}) 01:12:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000002582f000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3528.624546][ T6149] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x5000000]}, {0x1}]}) 01:12:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}]}) [ 3528.817700][ T6149] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025830000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x6000000]}, {0x1}]}) 01:12:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}]}) [ 3529.133712][ T6192] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 3529.303301][ T6192] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x7000000]}, {0x1}]}) 01:12:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}]}) 01:12:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025831000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3529.631712][ T6232] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:42 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={r4}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000000)={r4, @in={{0x2, 0x4e20, @remote}}, [0xb2, 0x5, 0x0, 0x10001, 0x40, 0x5, 0x81, 0xab41, 0x2, 0xfff, 0x6, 0x100000000, 0x8, 0x3, 0x1]}, &(0x7f0000000100)=0x100) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:12:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}]}) 01:12:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025832000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x8000000]}, {0x1}]}) 01:12:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}]}) 01:12:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0xfdfdffff]}, {0x1}]}) 01:12:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025833000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}]}) 01:12:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0xff000000]}, {0x1}]}) 01:12:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000000034000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff}]}) 01:12:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0xffff8000]}, {0x1}]}) 01:12:45 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={r4}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000000)={r4, @in={{0x2, 0x4e20, @remote}}, [0xb2, 0x5, 0x0, 0x10001, 0x40, 0x5, 0x81, 0xab41, 0x2, 0xfff, 0x6, 0x100000000, 0x8, 0x3, 0x1]}, &(0x7f0000000100)=0x100) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:12:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}]}) 01:12:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0xfffffdfd]}, {0x1}]}) 01:12:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025834000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3532.604070][ T6350] validate_nla: 6 callbacks suppressed [ 3532.604080][ T6350] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}]}) 01:12:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) [ 3532.798021][ T6350] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025835000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}]}) 01:12:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x2]}, {0x1}]}) [ 3533.078047][ T6391] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:46 executing program 4 (fault-call:3 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) [ 3533.237862][ T6391] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x3]}, {0x1}]}) 01:12:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}]}) [ 3533.350171][ T6418] FAULT_INJECTION: forcing a failure. [ 3533.350171][ T6418] name failslab, interval 1, probability 0, space 0, times 0 01:12:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025836000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3533.412263][ T6418] CPU: 1 PID: 6418 Comm: syz-executor.4 Not tainted 5.8.0-rc3-syzkaller #0 [ 3533.420875][ T6418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3533.430929][ T6418] Call Trace: [ 3533.434234][ T6418] dump_stack+0x18f/0x20d [ 3533.438596][ T6418] should_fail.cold+0x5/0x14 [ 3533.443213][ T6418] ? tomoyo_realpath_from_path+0xc3/0x620 [ 3533.448940][ T6418] should_failslab+0x5/0xf [ 3533.453363][ T6418] __kmalloc+0x27d/0x340 [ 3533.457619][ T6418] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 3533.463174][ T6418] tomoyo_realpath_from_path+0xc3/0x620 [ 3533.468758][ T6418] ? tomoyo_profile+0x42/0x50 [ 3533.473451][ T6418] tomoyo_path_number_perm+0x1cb/0x4d0 [ 3533.476881][ T6429] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 3533.478911][ T6418] ? tomoyo_path_number_perm+0x183/0x4d0 [ 3533.478947][ T6418] ? tomoyo_execute_permission+0x470/0x470 [ 3533.478965][ T6418] ? get_pid_task+0x116/0x200 [ 3533.478988][ T6418] ? find_held_lock+0x2d/0x110 [ 3533.507853][ T6418] ? selinux_inode_getsecctx+0x90/0x90 [ 3533.513328][ T6418] ? __mutex_unlock_slowpath+0xe2/0x610 [ 3533.518886][ T6418] ? lock_is_held_type+0xb0/0xe0 [ 3533.523836][ T6418] ? __fget_files+0x294/0x400 [ 3533.528536][ T6418] security_file_ioctl+0x50/0xb0 [ 3533.533483][ T6418] ksys_ioctl+0x50/0x180 [ 3533.537730][ T6418] __x64_sys_ioctl+0x6f/0xb0 [ 3533.542326][ T6418] ? lockdep_hardirqs_on+0x6a/0xe0 [ 3533.547456][ T6418] do_syscall_64+0x60/0xe0 [ 3533.551884][ T6418] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3533.557776][ T6418] RIP: 0033:0x45cb29 [ 3533.561915][ T6418] Code: Bad RIP value. [ 3533.565978][ T6418] RSP: 002b:00007fb3c31fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3533.574389][ T6418] RAX: ffffffffffffffda RBX: 00000000004e8d20 RCX: 000000000045cb29 [ 3533.582362][ T6418] RDX: 0000000020000280 RSI: 000000004008ae90 RDI: 0000000000000005 [ 3533.590331][ T6418] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3533.598315][ T6418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 3533.606283][ T6418] R13: 00000000000003da R14: 00000000004c6999 R15: 00007fb3c31fe6d4 [ 3533.623764][ T6418] ERROR: Out of memory at tomoyo_realpath_from_path. 01:12:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}]}) 01:12:46 executing program 4 (fault-call:3 fault-nth:1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) [ 3533.699340][ T6429] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x4]}, {0x1}]}) 01:12:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025837000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3533.878268][ T6453] FAULT_INJECTION: forcing a failure. [ 3533.878268][ T6453] name failslab, interval 1, probability 0, space 0, times 0 [ 3533.928640][ T6453] CPU: 0 PID: 6453 Comm: syz-executor.4 Not tainted 5.8.0-rc3-syzkaller #0 [ 3533.937251][ T6453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3533.947303][ T6453] Call Trace: [ 3533.950602][ T6453] dump_stack+0x18f/0x20d [ 3533.954942][ T6453] should_fail.cold+0x5/0x14 [ 3533.959549][ T6453] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 3533.964953][ T6453] should_failslab+0x5/0xf [ 3533.969400][ T6453] __kmalloc+0x27d/0x340 [ 3533.973658][ T6453] ? tomoyo_realpath_from_path+0xc3/0x620 [ 3533.979384][ T6453] tomoyo_encode2.part.0+0xe9/0x3a0 [ 3533.984590][ T6453] ? tomoyo_realpath_from_path+0xc3/0x620 [ 3533.990343][ T6453] tomoyo_encode+0x28/0x50 [ 3533.994813][ T6453] tomoyo_realpath_from_path+0x186/0x620 [ 3534.000456][ T6453] ? tomoyo_profile+0x42/0x50 [ 3534.005145][ T6453] tomoyo_path_number_perm+0x1cb/0x4d0 [ 3534.010623][ T6453] ? tomoyo_path_number_perm+0x183/0x4d0 [ 3534.016324][ T6453] ? tomoyo_execute_permission+0x470/0x470 [ 3534.022150][ T6453] ? get_pid_task+0x116/0x200 [ 3534.026858][ T6453] ? find_held_lock+0x2d/0x110 [ 3534.031676][ T6453] ? selinux_inode_getsecctx+0x90/0x90 [ 3534.037173][ T6453] ? __mutex_unlock_slowpath+0xe2/0x610 [ 3534.042725][ T6453] ? lock_is_held_type+0xb0/0xe0 [ 3534.047948][ T6453] ? __fget_files+0x294/0x400 [ 3534.052649][ T6453] security_file_ioctl+0x50/0xb0 [ 3534.057645][ T6453] ksys_ioctl+0x50/0x180 [ 3534.061897][ T6453] __x64_sys_ioctl+0x6f/0xb0 [ 3534.066494][ T6453] ? lockdep_hardirqs_on+0x6a/0xe0 [ 3534.071612][ T6453] do_syscall_64+0x60/0xe0 [ 3534.076033][ T6453] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3534.081930][ T6453] RIP: 0033:0x45cb29 [ 3534.085852][ T6453] Code: Bad RIP value. [ 3534.089931][ T6453] RSP: 002b:00007fb3c31fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3534.098356][ T6453] RAX: ffffffffffffffda RBX: 00000000004e8d20 RCX: 000000000045cb29 [ 3534.106325][ T6453] RDX: 0000000020000280 RSI: 000000004008ae90 RDI: 0000000000000005 [ 3534.114295][ T6453] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3534.122264][ T6453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 3534.130239][ T6453] R13: 00000000000003da R14: 00000000004c6999 R15: 00007fb3c31fe6d4 01:12:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}]}) 01:12:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x5]}, {0x1}]}) [ 3534.231038][ T6472] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 3534.248468][ T6453] ERROR: Out of memory at tomoyo_realpath_from_path. 01:12:47 executing program 4 (fault-call:3 fault-nth:2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}]}) [ 3534.408448][ T6472] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 3534.425356][ T6489] FAULT_INJECTION: forcing a failure. [ 3534.425356][ T6489] name failslab, interval 1, probability 0, space 0, times 0 [ 3534.495621][ T6489] CPU: 1 PID: 6489 Comm: syz-executor.4 Not tainted 5.8.0-rc3-syzkaller #0 [ 3534.504226][ T6489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3534.514277][ T6489] Call Trace: [ 3534.517578][ T6489] dump_stack+0x18f/0x20d [ 3534.521918][ T6489] should_fail.cold+0x5/0x14 [ 3534.526514][ T6489] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 3534.531879][ T6489] should_failslab+0x5/0xf [ 3534.536297][ T6489] __kmalloc+0x27d/0x340 [ 3534.540567][ T6489] ? tomoyo_realpath_from_path+0xc3/0x620 [ 3534.546293][ T6489] tomoyo_encode2.part.0+0xe9/0x3a0 [ 3534.551488][ T6489] ? tomoyo_realpath_from_path+0xc3/0x620 [ 3534.557209][ T6489] tomoyo_encode+0x28/0x50 [ 3534.561672][ T6489] tomoyo_realpath_from_path+0x186/0x620 [ 3534.567331][ T6489] ? tomoyo_profile+0x42/0x50 [ 3534.572110][ T6489] tomoyo_path_number_perm+0x1cb/0x4d0 [ 3534.577597][ T6489] ? tomoyo_path_number_perm+0x183/0x4d0 [ 3534.583254][ T6489] ? tomoyo_execute_permission+0x470/0x470 [ 3534.589073][ T6489] ? get_pid_task+0x116/0x200 [ 3534.593753][ T6489] ? find_held_lock+0x2d/0x110 [ 3534.598531][ T6489] ? selinux_inode_getsecctx+0x90/0x90 [ 3534.603989][ T6489] ? __mutex_unlock_slowpath+0xe2/0x610 [ 3534.609531][ T6489] ? lock_is_held_type+0xb0/0xe0 [ 3534.614472][ T6489] ? __fget_files+0x294/0x400 [ 3534.619192][ T6489] security_file_ioctl+0x50/0xb0 [ 3534.624124][ T6489] ksys_ioctl+0x50/0x180 [ 3534.628367][ T6489] __x64_sys_ioctl+0x6f/0xb0 [ 3534.632965][ T6489] ? lockdep_hardirqs_on+0x6a/0xe0 [ 3534.638074][ T6489] do_syscall_64+0x60/0xe0 [ 3534.642484][ T6489] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3534.648366][ T6489] RIP: 0033:0x45cb29 [ 3534.652242][ T6489] Code: Bad RIP value. [ 3534.656293][ T6489] RSP: 002b:00007fb3c31fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3534.664754][ T6489] RAX: ffffffffffffffda RBX: 00000000004e8d20 RCX: 000000000045cb29 [ 3534.672713][ T6489] RDX: 0000000020000280 RSI: 000000004008ae90 RDI: 0000000000000005 [ 3534.680680][ T6489] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3534.688645][ T6489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 3534.696610][ T6489] R13: 00000000000003da R14: 00000000004c6999 R15: 00007fb3c31fe6d4 01:12:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x6]}, {0x1}]}) 01:12:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}]}) 01:12:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025838000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3534.900961][ T6526] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x7]}, {0x1}]}) 01:12:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}]}) [ 3535.018194][ T6526] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x8]}, {0x1}]}) 01:12:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025839000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000}]}) 01:12:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x300]}, {0x1}]}) 01:12:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}]}) [ 3535.564632][ T6489] ERROR: Out of memory at tomoyo_realpath_from_path. 01:12:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000002583a000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1}]}) 01:12:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x500]}, {0x1}]}) 01:12:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x2]}]}) 01:12:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x2, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x600]}, {0x1}]}) 01:12:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000002583b000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x10, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x3]}]}) 01:12:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x700]}, {0x1}]}) 01:12:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000002583c000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4147, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0xff00]}, {0x1}]}) 01:12:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x4]}]}) 01:12:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000002583d000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4610, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x5]}]}) 01:12:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x80ffff]}, {0x1}]}) 01:12:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000002583e000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4b47, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x1000000]}, {0x1}]}) 01:12:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x6]}]}) 01:12:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4b49, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000000003f000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x2000000]}, {0x1}]}) 01:12:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x7]}]}) 01:12:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4c01, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000002583f000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x3000000]}, {0x1}]}) 01:12:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x300]}]}) [ 3537.622215][ T6888] validate_nla: 14 callbacks suppressed [ 3537.622224][ T6888] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x541b, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x4000000]}, {0x1}]}) [ 3537.778438][ T6888] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x500]}]}) 01:12:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x5421, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000000040000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:51 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0xe26, 0xffffffffffffffff}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r0, 0x4) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xf5) 01:12:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x600]}]}) 01:12:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x5000000]}, {0x1}]}) 01:12:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x5450, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) [ 3538.108498][ T6947] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x6000000]}, {0x1}]}) 01:12:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x700]}]}) [ 3538.250028][ T6947] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x5451, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025840000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x3f00]}]}) 01:12:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x7000000]}, {0x1}]}) [ 3538.599626][ T7008] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x5452, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x80ffff]}]}) 01:12:51 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000000)=""/164) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0001d, 0x4, 0x0, 0x8003906, 0x10000000002) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000180)={0x3, 0x39, 0x8, 0x100, [], [], [], 0xfff, 0xfffffffa, 0xd0, 0x0, "0071b44362ca20a8aad0defe06752cf5"}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)=0xf5) [ 3538.758632][ T7008] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x8000000]}, {0x1}]}) 01:12:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025841000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x5460, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x1000000]}]}) [ 3539.097430][ T7072] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfdfdffff]}, {0x1}]}) 01:12:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x6364, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) [ 3539.237492][ T7072] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x2000000]}]}) 01:12:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025842000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x8912, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0xff000000]}, {0x1}]}) [ 3539.533832][ T7122] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x3000000]}]}) 01:12:52 executing program 0 (fault-call:3 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) [ 3539.678137][ T7122] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0xffff8000]}, {0x1}]}) [ 3539.782063][ T7151] FAULT_INJECTION: forcing a failure. [ 3539.782063][ T7151] name failslab, interval 1, probability 0, space 0, times 0 01:12:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025843000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x4000000]}]}) [ 3539.847688][ T7151] CPU: 1 PID: 7151 Comm: syz-executor.0 Not tainted 5.8.0-rc3-syzkaller #0 [ 3539.856459][ T7151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3539.866682][ T7151] Call Trace: [ 3539.870173][ T7151] dump_stack+0x18f/0x20d [ 3539.874637][ T7151] should_fail.cold+0x5/0x14 [ 3539.879304][ T7151] ? tomoyo_realpath_from_path+0xc3/0x620 [ 3539.885179][ T7151] should_failslab+0x5/0xf [ 3539.889917][ T7151] __kmalloc+0x27d/0x340 [ 3539.894360][ T7151] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 3539.899937][ T7151] tomoyo_realpath_from_path+0xc3/0x620 [ 3539.905654][ T7151] ? tomoyo_profile+0x42/0x50 [ 3539.910360][ T7151] tomoyo_path_number_perm+0x1cb/0x4d0 [ 3539.915860][ T7151] ? tomoyo_path_number_perm+0x183/0x4d0 [ 3539.921520][ T7151] ? tomoyo_execute_permission+0x470/0x470 [ 3539.927350][ T7151] ? get_pid_task+0x116/0x200 [ 3539.932147][ T7151] ? find_held_lock+0x2d/0x110 [ 3539.936952][ T7151] ? selinux_inode_getsecctx+0x90/0x90 [ 3539.942442][ T7151] ? __mutex_unlock_slowpath+0xe2/0x610 [ 3539.948017][ T7151] ? lock_is_held_type+0xb0/0xe0 [ 3539.952985][ T7151] ? __fget_files+0x294/0x400 [ 3539.957696][ T7151] security_file_ioctl+0x50/0xb0 [ 3539.962666][ T7151] ksys_ioctl+0x50/0x180 [ 3539.966930][ T7151] __x64_sys_ioctl+0x6f/0xb0 [ 3539.971816][ T7151] ? lockdep_hardirqs_on+0x6a/0xe0 [ 3539.977020][ T7151] do_syscall_64+0x60/0xe0 [ 3539.981463][ T7151] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3539.987376][ T7151] RIP: 0033:0x45cb29 [ 3539.991366][ T7151] Code: Bad RIP value. 01:12:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x8933, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) [ 3539.995448][ T7151] RSP: 002b:00007fd4fd57ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3540.004077][ T7151] RAX: ffffffffffffffda RBX: 00000000004e8d20 RCX: 000000000045cb29 [ 3540.012082][ T7151] RDX: 0000000020000280 RSI: 000000004008ae90 RDI: 0000000000000005 [ 3540.020072][ T7151] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3540.028159][ T7151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 3540.036156][ T7151] R13: 00000000000003da R14: 00000000004c6999 R15: 00007fd4fd57f6d4 [ 3540.091366][ T7151] ERROR: Out of memory at tomoyo_realpath_from_path. 01:12:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x5000000]}]}) 01:12:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffdfd]}, {0x1}]}) 01:12:53 executing program 0 (fault-call:3 fault-nth:1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:12:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000000044000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3540.306482][ T7205] FAULT_INJECTION: forcing a failure. [ 3540.306482][ T7205] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3540.319933][ T7205] CPU: 0 PID: 7205 Comm: syz-executor.0 Not tainted 5.8.0-rc3-syzkaller #0 [ 3540.328529][ T7205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3540.338769][ T7205] Call Trace: [ 3540.342089][ T7205] dump_stack+0x18f/0x20d [ 3540.346443][ T7205] should_fail.cold+0x5/0x14 [ 3540.351139][ T7205] __alloc_pages_nodemask+0x1a3/0x930 [ 3540.356624][ T7205] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 3540.363424][ T7205] ? mark_lock+0xbc/0x1710 [ 3540.367969][ T7205] cache_grow_begin+0x8c/0xb20 [ 3540.372756][ T7205] ? mark_lock+0xbc/0x1710 [ 3540.377194][ T7205] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 3540.382679][ T7205] cache_alloc_refill+0x27b/0x340 [ 3540.387728][ T7205] ? lockdep_hardirqs_off+0x66/0xa0 [ 3540.393043][ T7205] ? tomoyo_realpath_from_path+0xc3/0x620 [ 3540.398810][ T7205] __kmalloc+0x319/0x340 [ 3540.403083][ T7205] tomoyo_realpath_from_path+0xc3/0x620 [ 3540.408797][ T7205] ? tomoyo_profile+0x42/0x50 [ 3540.413745][ T7205] tomoyo_path_number_perm+0x1cb/0x4d0 [ 3540.419384][ T7205] ? tomoyo_path_number_perm+0x183/0x4d0 [ 3540.425052][ T7205] ? tomoyo_execute_permission+0x470/0x470 [ 3540.430907][ T7205] ? get_pid_task+0x116/0x200 [ 3540.435660][ T7205] ? find_held_lock+0x2d/0x110 [ 3540.440472][ T7205] ? selinux_inode_getsecctx+0x90/0x90 [ 3540.445958][ T7205] ? __mutex_unlock_slowpath+0xe2/0x610 [ 3540.451543][ T7205] ? lock_is_held_type+0xb0/0xe0 [ 3540.456509][ T7205] ? __fget_files+0x294/0x400 [ 3540.461237][ T7205] security_file_ioctl+0x50/0xb0 [ 3540.466205][ T7205] ksys_ioctl+0x50/0x180 [ 3540.470486][ T7205] __x64_sys_ioctl+0x6f/0xb0 [ 3540.475105][ T7205] ? lockdep_hardirqs_on+0x6a/0xe0 [ 3540.480241][ T7205] do_syscall_64+0x60/0xe0 [ 3540.484678][ T7205] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3540.490586][ T7205] RIP: 0033:0x45cb29 [ 3540.494488][ T7205] Code: Bad RIP value. [ 3540.498567][ T7205] RSP: 002b:00007fd4fd57ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 01:12:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xae01, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) [ 3540.506995][ T7205] RAX: ffffffffffffffda RBX: 00000000004e8d20 RCX: 000000000045cb29 [ 3540.514990][ T7205] RDX: 0000000020000280 RSI: 000000004008ae90 RDI: 0000000000000005 [ 3540.523173][ T7205] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3540.531190][ T7205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 3540.539178][ T7205] R13: 00000000000003da R14: 00000000004c6999 R15: 00007fd4fd57f6d4 01:12:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x6000000]}]}) 01:12:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:12:53 executing program 0 (fault-call:3 fault-nth:2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:12:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025844000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x2]}, {0x1}]}) [ 3540.879673][ T7268] FAULT_INJECTION: forcing a failure. [ 3540.879673][ T7268] name failslab, interval 1, probability 0, space 0, times 0 [ 3540.921087][ T7268] CPU: 0 PID: 7268 Comm: syz-executor.0 Not tainted 5.8.0-rc3-syzkaller #0 [ 3540.929704][ T7268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3540.939772][ T7268] Call Trace: [ 3540.943084][ T7268] dump_stack+0x18f/0x20d [ 3540.947446][ T7268] should_fail.cold+0x5/0x14 [ 3540.952234][ T7268] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 3540.957631][ T7268] should_failslab+0x5/0xf [ 3540.962072][ T7268] __kmalloc+0x27d/0x340 [ 3540.966474][ T7268] ? tomoyo_realpath_from_path+0xc3/0x620 [ 3540.972241][ T7268] tomoyo_encode2.part.0+0xe9/0x3a0 [ 3540.977480][ T7268] ? tomoyo_realpath_from_path+0xc3/0x620 [ 3540.983258][ T7268] tomoyo_encode+0x28/0x50 [ 3540.987706][ T7268] tomoyo_realpath_from_path+0x186/0x620 [ 3540.993372][ T7268] ? tomoyo_profile+0x42/0x50 [ 3540.998073][ T7268] tomoyo_path_number_perm+0x1cb/0x4d0 [ 3541.003554][ T7268] ? tomoyo_path_number_perm+0x183/0x4d0 [ 3541.009227][ T7268] ? tomoyo_execute_permission+0x470/0x470 [ 3541.015057][ T7268] ? get_pid_task+0x116/0x200 [ 3541.019823][ T7268] ? find_held_lock+0x2d/0x110 [ 3541.024823][ T7268] ? selinux_inode_getsecctx+0x90/0x90 [ 3541.030619][ T7268] ? __mutex_unlock_slowpath+0xe2/0x610 [ 3541.036188][ T7268] ? lock_is_held_type+0xb0/0xe0 [ 3541.041255][ T7268] ? __fget_files+0x294/0x400 [ 3541.045967][ T7268] security_file_ioctl+0x50/0xb0 [ 3541.051022][ T7268] ksys_ioctl+0x50/0x180 [ 3541.055292][ T7268] __x64_sys_ioctl+0x6f/0xb0 [ 3541.059903][ T7268] ? lockdep_hardirqs_on+0x6a/0xe0 [ 3541.065149][ T7268] do_syscall_64+0x60/0xe0 [ 3541.069587][ T7268] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3541.075490][ T7268] RIP: 0033:0x45cb29 [ 3541.079392][ T7268] Code: Bad RIP value. [ 3541.083471][ T7268] RSP: 002b:00007fd4fd57ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3541.091900][ T7268] RAX: ffffffffffffffda RBX: 00000000004e8d20 RCX: 000000000045cb29 [ 3541.099888][ T7268] RDX: 0000000020000280 RSI: 000000004008ae90 RDI: 0000000000000005 [ 3541.107869][ T7268] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 01:12:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xae41, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xae80, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x7000000]}]}) [ 3541.115856][ T7268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 3541.123970][ T7268] R13: 00000000000003da R14: 00000000004c6999 R15: 00007fd4fd57f6d4 01:12:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x3]}, {0x1}]}) [ 3541.221196][ T7268] ERROR: Out of memory at tomoyo_realpath_from_path. 01:12:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025845000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:54 executing program 0 (fault-call:3 fault-nth:3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:12:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xae9a, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x3f000000]}]}) 01:12:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x4]}, {0x1}]}) 01:12:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:12:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xaea2, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xfdfdffff]}]}) 01:12:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025846000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x5]}, {0x1}]}) 01:12:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x2, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:12:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xaea3, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x10, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:12:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x6]}, {0x1}]}) 01:12:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xffff8000]}]}) 01:12:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000000047000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x7]}, {0x1}]}) 01:12:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4144, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:12:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xaead, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xfffffdfd]}]}) 01:12:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x8]}, {0x1}]}) 01:12:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4b47, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:12:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025847000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1}]}) 01:12:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xaeb7, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x300]}, {0x1}]}) [ 3542.668026][ T7507] validate_nla: 13 callbacks suppressed [ 3542.668035][ T7507] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4b49, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:12:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x2]}]}) 01:12:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000000048000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x400454ca, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x500]}, {0x1}]}) 01:12:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x3]}]}) [ 3542.992093][ T7572] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4c01, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:12:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x40049409, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) [ 3543.111445][ T7572] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x600]}, {0x1}]}) 01:12:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x4]}]}) 01:12:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025848000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x541b, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:12:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4004ae86, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) [ 3543.387991][ T7634] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x700]}, {0x1}]}) [ 3543.469650][ T7634] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x5]}]}) 01:12:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4004ae8b, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x5421, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:12:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025849000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xff00]}, {0x1}]}) [ 3543.752596][ T7688] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x6]}]}) [ 3543.830798][ T7688] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4004ae99, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x5450, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:12:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000000004a000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:57 executing program 1: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000280)=@req3={0x1, 0xbd4, 0x8, 0x1, 0x622c, 0x3c94, 0x20}, 0x1c) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x3fa, 0x400, 0x70bd28, 0x25dfdbff, {0x1, 0x1, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4048001}, 0x74d1d85ee0ffeb29) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x9, 0x7, 0x10012, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000140)={r3}) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0xffff, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000080)={r5}) r6 = syz_open_dev$dri(0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x6df, 0x7ff, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000080)={r7}) r8 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r8, 0xc01064b3, &(0x7f0000000080)={r9}) dup2(r2, r4) 01:12:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x80ffff]}, {0x1}]}) 01:12:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x7]}]}) [ 3544.101200][ T7750] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x40086602, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) [ 3544.220671][ T7750] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x5451, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:12:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x9, 0x7, 0x10012, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000140)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0xffff, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r3}) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000080)={r5}) r6 = syz_open_dev$dri(0x0, 0x0, 0x40c80) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000080)={r7}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r9 = dup(r8) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x14) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1f}}}, 0x10000, 0x4, 0x8001, 0xfffffffd, 0x8}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r9, 0x84, 0x13, &(0x7f0000000280)={r10, 0x1}, &(0x7f00000002c0)=0x8) bind$bt_rfcomm(r9, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000300)=0x9) dup2(r0, r2) 01:12:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x1000000]}, {0x1}]}) 01:12:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x300]}]}) 01:12:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000002584a000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x5452, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:12:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x40087602, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) [ 3544.486142][ T7810] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:12:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x9, 0x7, 0x10012, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000140)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0xffff, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r3}) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x20000004, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000080)={r5}) r6 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000080)={r7}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r9 = dup(r8) bind$bt_rfcomm(r9, &(0x7f0000000040)={0x1f, @none}, 0xa) write$FUSE_WRITE(r9, &(0x7f00000000c0)={0x18, 0x0, 0x2, {0x7}}, 0x18) dup2(r0, r2) 01:12:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x2000000]}, {0x1}]}) 01:12:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x500]}]}) 01:12:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x5460, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:12:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000002584b000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x3000000]}, {0x1}]}) 01:12:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae89, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x9, 0x7, 0x10012, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000140)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0xffff, 0xcc, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r3}) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f00000000c0)={0xbc, &(0x7f0000000180)="def29a263d48b6f1daf046eb1090b2e45ca2dbfe508571d641fb753be378f1bf08c0eb3913b8bb6657ace489314b81b1b4337b8dea9451948087cbd45f29b39ae8a490df2f001ea72d5a70739d6151d02ef88b2ed50c67872ab610ea48e2d7e6ee56a6e57c1c593ed32941c2d8adc9d6f84ce6970938e81d81ce1cd8ddfe220b927be6e0a0a9faa96774726324bddc6d948c2ee118ed4dee26c164dc95fa4f114e5d3746ed8d7e8033300c8f55630969ddc84b645ad937230e904425"}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000080)={r5}) r6 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000080)={r7}) dup2(r0, r2) 01:12:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x6364, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:12:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x600]}]}) 01:12:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x4000000]}, {0x1}]}) 01:12:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae8a, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000000004c000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x9, 0x7, 0x10012, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000000c0)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0xffff, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r3}) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000080)={r5}) r6 = syz_open_dev$dri(0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r8 = dup(r7) bind$bt_rfcomm(r8, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x2084, 0x3, 0x4, 0x0, 0x0}) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r11 = dup(r10) bind$bt_rfcomm(r11, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$EVIOCSKEYCODE(r8, 0x40084504, &(0x7f0000000140)=[0xb, 0x807fff]) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000080)={r9}) dup2(r0, r2) 01:12:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x8912, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:12:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x5000000]}, {0x1}]}) 01:12:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x700]}]}) 01:12:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x9, 0x7, 0x10012, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000140)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0xffff, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r3}) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000080)={r5}) r6 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000080)={r7}) dup2(r0, r2) lsetxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:sshd_exec_t:s0\x00', 0x21, 0x5) 01:12:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae93, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000002584c000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x8933, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:12:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x6000000]}, {0x1}]}) 01:12:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x9, 0x7, 0x10012, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000140)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0xffff, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r3}) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000080)={r5}) r6 = syz_open_dev$dri(0x0, 0x0, 0x0) r7 = socket(0x1e, 0x4, 0x0) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r8, r7, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r8, 0x84, 0xf, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e22, @private=0xa010102}}, 0x1ff, 0x4, 0x10000, 0x80000001, 0xffff}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x7, 0x4b27, 0x200, 0x80000000, 0x8001, 0x4, 0x8000, 0x8, r9}, 0x20) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000080)={r10}) dup2(r0, r2) 01:12:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae9c, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x3f00]}]}) 01:12:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xae01, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:12:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000002584d000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x7000000]}, {0x1}]}) 01:12:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x80ffff]}]}) 01:12:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x40186366, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xae41, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:12:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x8000000]}, {0x1}]}) 01:12:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000002584e000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4020940d, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xae80, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:12:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xfdfdffff]}, {0x1}]}) 01:12:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x1000000]}]}) 01:12:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4040ae9e, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:12:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000002584f000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:12:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xae9a, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:12:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x2000000]}]}) 01:12:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4040aea0, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xff000000]}, {0x1}]}) 01:13:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025850000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xaea2, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048ae9b, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x3000000]}]}) 01:13:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025851000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xffff8000]}, {0x1}]}) 01:13:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x4000000]}]}) 01:13:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xaea3, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xfffffdfd]}, {0x1}]}) 01:13:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4068aea3, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025852000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x5000000]}]}) 01:13:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xaead, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4080aea2, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x2}]}) [ 3547.728346][ T8267] validate_nla: 18 callbacks suppressed [ 3547.728354][ T8267] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:13:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x6000000]}]}) 01:13:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xaeb7, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4080aebf, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025853000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x3}]}) [ 3548.099435][ T8329] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:13:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4090ae82, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x7000000]}]}) 01:13:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x400454ca, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) [ 3548.217895][ T8329] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:13:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x5}]}) 01:13:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025854000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4138ae84, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x7}]}) 01:13:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x3f000000]}]}) 01:13:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x40049409, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) [ 3548.572733][ T8395] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:13:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4188aea7, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) [ 3548.699001][ T8395] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:13:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0xa}]}) 01:13:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4004ae86, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfdfdffff]}]}) 01:13:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025855000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x41a0ae8d, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0xd}]}) 01:13:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4004ae8b, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) [ 3549.104827][ T8472] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:13:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xffff8000]}]}) [ 3549.219516][ T8472] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:13:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4400ae8f, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x10}]}) 01:13:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4004ae99, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025856000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffdfd]}]}) [ 3549.566379][ T8543] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:13:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x15}]}) 01:13:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x5000aea5, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x40086602, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1}]}) [ 3549.737850][ T8543] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:13:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x500}]}) 01:13:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x8004ae98, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x40087602, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025857000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x2]}]}) [ 3550.118706][ T8625] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:13:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x80086301, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae89, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0xff00}]}) 01:13:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x3]}]}) 01:13:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae8a, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x40000001}]}) 01:13:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025858000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x80086601, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x4]}]}) 01:13:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae93, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x80000008}]}) 01:13:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x80087601, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025859000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x5]}]}) 01:13:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x8040ae9f, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae9c, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0xffffff1f}]}) 01:13:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000002585a000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x6]}]}) 01:13:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x8080aea1, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x40186366, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:13:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000000b5b000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x7]}]}) 01:13:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4020940d, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x8090ae81, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0x2}]}) 01:13:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x300]}]}) 01:13:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4040ae9e, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000002585b000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0x3}]}) 01:13:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x8138ae83, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x500]}]}) 01:13:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4040aea0, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000000005c000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0x4}]}) 01:13:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x600]}]}) 01:13:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x8188aea6, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048ae9b, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000000035c000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x81a0ae8c, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0x5}]}) 01:13:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x700]}]}) 01:13:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4068aea3, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x3f00]}]}) 01:13:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0x6}]}) 01:13:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x8400ae8e, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000002585c000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4080aea2, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) [ 3552.847084][ T9086] validate_nla: 15 callbacks suppressed [ 3552.847093][ T9086] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:13:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x80ffff]}]}) 01:13:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0x7}]}) 01:13:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x9000aea4, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4080aebf, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) [ 3552.988345][ T9086] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:13:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000002585d000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0x8}]}) 01:13:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4090ae82, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x1000000]}]}) 01:13:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc0045878, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) [ 3553.245736][ T9144] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:13:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4138ae84, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc0045878, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) [ 3553.369619][ T9144] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:13:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0x300}]}) 01:13:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000000005e000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x2000000]}]}) 01:13:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4188aea7, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc008ae05, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0x500}]}) [ 3553.641675][ T9218] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:13:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x3000000]}]}) [ 3553.759292][ T9218] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:13:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x41a0ae8d, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000002585e000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc008ae88, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0x600}]}) [ 3553.968273][ T9275] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:13:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4400ae8f, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x4000000]}]}) [ 3554.068164][ T9275] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:13:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0x700}]}) 01:13:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000002585f000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc008ae91, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x5000aea5, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) [ 3554.310709][ T9328] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:13:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x5000000]}]}) 01:13:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0xff00}]}) 01:13:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc008aec1, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) [ 3554.458581][ T9328] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:13:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x8004500b, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0x80ffff}]}) 01:13:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000000060000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x6000000]}]}) 01:13:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x8004ae98, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc0189436, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x7000000]}]}) 01:13:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0x1000000}]}) 01:13:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000025860000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x80086301, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc018ae85, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x3f000000]}]}) 01:13:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0x2000000}]}) 01:13:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000000064000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc020660b, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x80086601, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xfdfdffff]}]}) 01:13:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0x3000000}]}) 01:13:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x80087601, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xffff8000]}]}) 01:13:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc028ae92, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000005865000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x8040ae9f, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0x4000000}]}) 01:13:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc080aebe, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xfffffdfd]}]}) 01:13:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0x5000000}]}) 01:13:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x8080aea1, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000000068000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x3, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x8090ae81, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:09 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x6c0000, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none}, 0xa) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r3, r2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000180)=""/27, &(0x7f00000001c0)=0x1b) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4000041) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = dup(r4) bind$bt_rfcomm(r5, &(0x7f0000000040), 0xa) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x1, 0x0, 0x7, 0x0, 0x2}]}) 01:13:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0x6000000}]}) 01:13:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x4, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000000006c000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000000, 0x8, 0x0, 0xfffffffe}, {0x1, 0x5d3}]}) 01:13:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x80984120, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x7, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0x7000000}]}) 01:13:09 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0xa012) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1}]}) 01:13:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000000074000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x8138ae83, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x15, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0x8000000}]}) 01:13:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000000078000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r4, r3, 0x0) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) close(r5) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000040)={r7}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000000)={0x81, 0x9, 0x20c, 0x1, 0x7, 0x3, 0x3, 0x800, r7}, &(0x7f0000000040)=0x20) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)=ANY=[@ANYBLOB="020000000000000001000040080200000000000000000000000000000000000000000000000000000001000010f3072c83974f562800"/81]) 01:13:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x8188aea6, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x50, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0xfdfdffff}]}) 01:13:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x81a0ae8c, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000000007a000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000000000000010000400800000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000119600"/90]) prctl$PR_GET_SECCOMP(0x15) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x6) bind$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$sock_proto_private(r3, 0x89ec, &(0x7f0000000080)="23053cc668a01bf7888a045af751f7e810b97aa483c4314a27e0fadd8c5ea542b85bd1beddee3c29c0e50165896964dd980f25f3f6ec4e27278cedd909ad5f393db61d986b0900e05c6b69380d59bd4e64941dd36eca24ace307b88edc3274ff81e1cf21baed0155d84722f9afa8e1ba685468094f76d5b65d165fc5be48faef365461a394263138ceececab415415ca9b7043e511") syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x8, 0x40000) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/80, 0x50}], 0x1, &(0x7f0000001840)=[{&(0x7f0000000340)=""/185, 0xb9}, {&(0x7f0000000480)=""/229, 0xe5}, {&(0x7f0000000580)=""/76, 0x4c}, {&(0x7f0000000600)=""/176, 0xb0}, {&(0x7f00000006c0)=""/228, 0xe4}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/104, 0x68}], 0x7, 0x0) dup3(r6, r5, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x5}, &(0x7f0000000200)=0x8) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 01:13:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0xff000000}]}) 01:13:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x8400ae8e, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)=ANY=[@ANYBLOB="7c0000000000001601000040080000000000000000004fe829caf146b6bd000000000000000000000000000054e600000000000000000000000000550f000000000800"/88]) r3 = mq_open(&(0x7f0000000000)='/dev/kvm\x00', 0x800, 0x8e, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x20}) syncfs(r3) 01:13:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x2, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000000081000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0xffff8000}]}) 01:13:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x9000aea4, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$KVM_ASSIGN_PCI_DEVICE(r3, 0x8040ae69, &(0x7f0000000000)={0x9, 0x4, 0x6, 0x0, 0x100}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1}]}) 01:13:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x3, [{0xd, 0x8, 0x3}, {0x1}]}) [ 3557.938885][ T9875] validate_nla: 19 callbacks suppressed [ 3557.938894][ T9875] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:13:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0xfffffdfd}]}) 01:13:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc0045878, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000000384000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000000000000010000400800000000000000000000000000000000000000000000000000000000000000000000000100"/88]) 01:13:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x4, [{0xd, 0x8, 0x3}, {0x1}]}) [ 3558.230248][ T9923] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:13:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1}]}) 01:13:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc0045878, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) [ 3558.388053][ T9923] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:13:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x5, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000004088000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x248401, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x42a000, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffb) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)=ANY=[@ANYBLOB="020000000000080000000000000000808000000000000000000000000000000000000000000000000000000000000000000000000000000454d57db4f285dadc00"/81]) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) bind$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none}, 0xa) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = dup(r5) bind$bt_rfcomm(r6, &(0x7f0000000040)={0x1f, @none}, 0xa) write$dsp(r6, &(0x7f00000000c0)="763f6871d71aee6d54feed9e4c2b23ec8231d35628603c161f53d1affdd42ea454fae5cdc54d182eaef705ba58a401bd6ee62ae5055541bf44eb0e8368131eb5238d7f0ab8b4dc7ae84355928b2efb231cb1d4b7c987bbe64c7dac2eb31ea7301cfeeabc05a9134507c0886f69a26a68252a42862de6c9ccadfe7597b90ea9f7def8edffcebe2ed632c2d3ed9f27624cf42b038ff2a6", 0x96) ioctl$VIDIOC_G_MODULATOR(r4, 0xc0445636, &(0x7f0000000000)={0x5, "7704c8c2ece4d19acf06e912ef2a4588080d8cb724fbdee586e96d4eda58181c", 0x2a, 0x7, 0x3402, 0x0, 0x3}) 01:13:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0x0, 0x2}]}) 01:13:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc008ae05, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0xb0400, 0x0) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f0000000040)={0x2, 0xffffffff, 0x2, 0xffffffff, 0x1, 0x7fffffff}) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) ptrace$pokeuser(0x6, r2, 0x7ff, 0x401) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @none}, 0xa) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1}]}) 01:13:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x6, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0x0, 0x3}]}) 01:13:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc008ae88, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x7, [{0xd, 0x8, 0x3}, {0x1}]}) [ 3559.109702][T10020] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:13:12 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @none}, 0xa) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none}, 0xa) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = dup(r5) bind$bt_rfcomm(r6, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$SOUND_MIXER_WRITE_RECSRC(r6, 0xc0044dff, &(0x7f0000000080)=0x20) r7 = dup(r4) bind$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @none}, 0xa) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x802200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r8, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x1) fsconfig$FSCONFIG_SET_PATH(r7, 0x3, &(0x7f0000000000)='$\\,]&,\\\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1}]}) 01:13:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0x0, 0x4}]}) [ 3559.280413][T10020] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:13:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc008ae91, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000ffffa888000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$isdn(0x22, 0x3, 0x3) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x40) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r4, 0x0, 0x0) r5 = socket$bt_rfcomm(0x1f, 0x1, 0x3) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fbca0000a6cd04ac7bc19ee263cfebf9c400cea9d0309181337352b896b8d85637dc9942e9ec5df9f7139418bdf58b591142c89b1dcbb37a377e87f237ed7fc66baa8f404c0a2d32f77d50ad895697f30bb034ec6f1134f4efaaf0ff2a8d94792d79f55c185b2a7e69f537e1dbe3d21068739c6b29d311c47c3df8b95898840bb8c29beab9f2d56fae29df8e26684146e15a16831c49555beaf24db0b36582f7d9f8d8c5047c4584f20a00"/191], 0xca, 0x4) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f00000000c0)=r4) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000001000040080000000000000000000000000000000000403ec750000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000f390ab47c23198b365b094af96ed4343e65885b2237b26b321eea448e1aa10fc8adb8c8a013a46f67758f60220c6433b1ca9820a81818caeafc3522b16da8aafafb196461ba637f46a4e8972c6327dfec5b0a4c2fb8ad434bf0db755"]) 01:13:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x300, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0x0, 0x5}]}) [ 3559.611952][T10080] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:13:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x500, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc008aec1, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) bind$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) bind$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none}, 0xa) ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x46) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000080)=ANY=[@ANYBLOB="05000000000000000100004008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000a00000001000000010000000500000007009a95079800006d0400000000000000000000000000000a0000000000000004000000f6070000010000000000000020000000000000000000d5c8788c09a535c296c81e00000000000006000000020000000400000002000000413b0000090000009f0f633800"/208]) 01:13:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0x0, 0x6}]}) [ 3559.808908][T10080] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:13:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x600, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000ffffff9e000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc0189436, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8}, {0x1}]}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_NMI(r3, 0xae9a) 01:13:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0x0, 0x7}]}) [ 3560.106283][T10147] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:13:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x700, [{0xd, 0x8, 0x3}, {0x1}]}) [ 3560.238607][T10147] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:13:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r3, r2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 01:13:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc018aa3f, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0x0, 0x8}]}) 01:13:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000b91909b3000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x3f00, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000010000400800000000000000000000000000000000000000000000000000000000000000000000000100"/88]) [ 3560.520875][T10216] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:13:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc018ae85, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0x0, 0x300}]}) 01:13:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000000003b4000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc020660b, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x80ffff, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0x0, 0x500}]}) 01:13:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000000001b8000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc020aa00, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x1000000, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0x0, 0x600}]}) 01:13:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc028aa03, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x2000000, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0x0, 0x700}]}) 01:13:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000b30919b9000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x9, 0x7, 0x10012, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000140)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0xffff, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r3}) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000080)={r5}) r6 = syz_open_dev$dri(0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r8 = dup(r7) bind$bt_rfcomm(r8, &(0x7f0000000040)={0x1f, @none}, 0xa) r9 = openat(r8, &(0x7f00000000c0)='./file0\x00', 0x200880, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000180)={0x1, 0x8000, 0x9, 0x401, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r9, 0xc01064b3, &(0x7f00000001c0)={r10}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000080)={r11}) dup2(r0, r2) 01:13:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc028ae92, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x3000000, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x9, 0x7, 0x10012, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000140)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0xffff, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r3}) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r4, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000180)=0x4) r6 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000080)={r7}) r8 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r8, 0xc01064b3, &(0x7f0000000080)={r9}) dup2(r0, r2) 01:13:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0x0, 0xff00}]}) 01:13:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000000003bc000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc080aebe, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0x0, 0x80ffff}]}) 01:13:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x4000000, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x3, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000ffffffc3000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x5000000, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0x0, 0x1000000}]}) 01:13:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x4, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0x0, 0x2000000}]}) 01:13:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x6000000, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000000003cc000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x7, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0x0, 0x3000000}]}) 01:13:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000ffffffe4000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x7000000, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x15, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x9, 0x7, 0x10012, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000140)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0xffff, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r3}) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000080)={r5}) r6 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000080)={r7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x34, 0x64, 0xd27, 0x0, 0x0, {}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r9, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1a, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x6, &(0x7f00000000c0)=@raw=[@alu={0x3, 0x1, 0xc, 0x6, 0x2, 0x6, 0x8}, @map={0x18, 0xa}, @call={0x85, 0x0, 0x0, 0x14}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x7ff, 0x7e, &(0x7f00000001c0)=""/126, 0x41000, 0x2, [], 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xe, 0x401, 0x1f}, 0x10, r10}, 0x78) dup2(r0, r2) 01:13:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0x0, 0x4000000}]}) [ 3563.018938][T10556] validate_nla: 14 callbacks suppressed [ 3563.018948][T10556] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:13:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x3f000000, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x50, 0x0, [{0xd, 0x8}, {0x1}]}) 01:13:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0x0, 0x5000000}]}) 01:13:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000000003e6000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3563.322784][T10625] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:13:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0x0, 0x6000000}]}) 01:13:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0xfdfdffff, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0x8}, {0x1}]}) [ 3563.453041][T10625] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:13:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000fffffff0000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0xffff8000, [{0xd, 0x8, 0x3}, {0x1}]}) 01:13:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x2, [{0xd, 0x8}, {0x1}]}) 01:13:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0x0, 0x7000000}]}) [ 3563.712349][T10680] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:13:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x3, [{0xd, 0x8}, {0x1}]}) 01:13:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0xfffffdfd, [{0xd, 0x8, 0x3}, {0x1}]}) [ 3563.876765][T10680] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:13:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0x0, 0x8000000}]}) 01:13:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000000003f2000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000c00000000000a0005003c"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 01:13:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x7, 0x8, 0x3}, {0x1}]}) 01:13:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x4, [{0xd, 0x8}, {0x1}]}) [ 3564.126236][T10734] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 01:13:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x40000001, 0x8, 0x3}, {0x1, 0x0, 0xfdfdffff}]}) [ 3564.264890][ T2519] ================================================================== [ 3564.273311][ T2519] BUG: KASAN: vmalloc-out-of-bounds in srcu_invoke_callbacks+0x35b/0x3a0 [ 3564.281717][ T2519] Read of size 8 at addr ffffc900164d2e30 by task kworker/0:3/2519 [ 3564.289591][ T2519] [ 3564.291935][ T2519] CPU: 0 PID: 2519 Comm: kworker/0:3 Not tainted 5.8.0-rc3-syzkaller #0 [ 3564.300252][ T2519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3564.310307][ T2519] Workqueue: rcu_gp srcu_invoke_callbacks [ 3564.316024][ T2519] Call Trace: [ 3564.319314][ T2519] dump_stack+0x18f/0x20d [ 3564.323650][ T2519] ? srcu_invoke_callbacks+0x35b/0x3a0 [ 3564.329134][ T2519] ? srcu_invoke_callbacks+0x35b/0x3a0 [ 3564.334607][ T2519] print_address_description.constprop.0.cold+0x5/0x436 [ 3564.341542][ T2519] ? lock_release+0x8d0/0x8d0 [ 3564.346235][ T2519] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3564.352215][ T2519] ? lockdep_hardirqs_off+0x66/0xa0 [ 3564.357408][ T2519] ? vprintk_func+0x97/0x1a6 [ 3564.362003][ T2519] ? srcu_invoke_callbacks+0x35b/0x3a0 [ 3564.367457][ T2519] kasan_report.cold+0x1f/0x37 [ 3564.372223][ T2519] ? srcu_invoke_callbacks+0x35b/0x3a0 [ 3564.377682][ T2519] srcu_invoke_callbacks+0x35b/0x3a0 [ 3564.382966][ T2519] ? srcu_module_notify+0x280/0x280 [ 3564.388208][ T2519] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3564.393439][ T2519] ? lock_is_held_type+0xb0/0xe0 [ 3564.398381][ T2519] process_one_work+0x94c/0x1670 [ 3564.403327][ T2519] ? lock_release+0x8d0/0x8d0 [ 3564.408002][ T2519] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 3564.413375][ T2519] ? rwlock_bug.part.0+0x90/0x90 [ 3564.418319][ T2519] ? lockdep_hardirqs_off+0x66/0xa0 [ 3564.423520][ T2519] worker_thread+0x64c/0x1120 [ 3564.428221][ T2519] ? __kthread_parkme+0x13f/0x1e0 [ 3564.433244][ T2519] ? process_one_work+0x1670/0x1670 [ 3564.438442][ T2519] kthread+0x3b5/0x4a0 [ 3564.442508][ T2519] ? __kthread_bind_mask+0xc0/0xc0 [ 3564.447614][ T2519] ? __kthread_bind_mask+0xc0/0xc0 [ 3564.452806][ T2519] ret_from_fork+0x1f/0x30 [ 3564.457245][ T2519] [ 3564.459562][ T2519] [ 3564.461881][ T2519] Memory state around the buggy address: [ 3564.467513][ T2519] ffffc900164d2d00: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 3564.475571][ T2519] ffffc900164d2d80: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 3564.483640][ T2519] >ffffc900164d2e00: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 3564.491689][ T2519] ^ [ 3564.497328][ T2519] ffffc900164d2e80: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 3564.505382][ T2519] ffffc900164d2f00: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 3564.513435][ T2519] ================================================================== [ 3564.521484][ T2519] Disabling lock debugging due to kernel taint [ 3564.527622][ T2519] Kernel panic - not syncing: panic_on_warn set ... [ 3564.534227][ T2519] CPU: 0 PID: 2519 Comm: kworker/0:3 Tainted: G B 5.8.0-rc3-syzkaller #0 [ 3564.543933][ T2519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3564.553991][ T2519] Workqueue: rcu_gp srcu_invoke_callbacks [ 3564.559697][ T2519] Call Trace: [ 3564.562984][ T2519] dump_stack+0x18f/0x20d [ 3564.567313][ T2519] ? srcu_invoke_callbacks+0x2b0/0x3a0 [ 3564.572823][ T2519] panic+0x2e3/0x75c [ 3564.576718][ T2519] ? __warn_printk+0xf3/0xf3 [ 3564.581307][ T2519] ? _raw_spin_unlock_irqrestore+0x5b/0xe0 [ 3564.587129][ T2519] ? srcu_invoke_callbacks+0x35b/0x3a0 [ 3564.592577][ T2519] ? srcu_invoke_callbacks+0x35b/0x3a0 [ 3564.598048][ T2519] end_report+0x4d/0x53 [ 3564.602203][ T2519] kasan_report.cold+0xd/0x37 [ 3564.606897][ T2519] ? srcu_invoke_callbacks+0x35b/0x3a0 [ 3564.612350][ T2519] srcu_invoke_callbacks+0x35b/0x3a0 [ 3564.617629][ T2519] ? srcu_module_notify+0x280/0x280 [ 3564.622822][ T2519] ? _raw_spin_unlock_irq+0x1f/0x80 [ 3564.628013][ T2519] ? lock_is_held_type+0xb0/0xe0 [ 3564.632944][ T2519] process_one_work+0x94c/0x1670 [ 3564.637880][ T2519] ? lock_release+0x8d0/0x8d0 [ 3564.642547][ T2519] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 3564.647912][ T2519] ? rwlock_bug.part.0+0x90/0x90 [ 3564.652840][ T2519] ? lockdep_hardirqs_off+0x66/0xa0 [ 3564.658146][ T2519] worker_thread+0x64c/0x1120 [ 3564.662823][ T2519] ? __kthread_parkme+0x13f/0x1e0 [ 3564.667846][ T2519] ? process_one_work+0x1670/0x1670 [ 3564.673043][ T2519] kthread+0x3b5/0x4a0 [ 3564.677108][ T2519] ? __kthread_bind_mask+0xc0/0xc0 [ 3564.682212][ T2519] ? __kthread_bind_mask+0xc0/0xc0 [ 3564.687407][ T2519] ret_from_fork+0x1f/0x30 [ 3564.693004][ T2519] Kernel Offset: disabled [ 3564.697316][ T2519] Rebooting in 86400 seconds..