tl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r8, 0x4, 0x100000000) [ 1222.948782][T12840] IPVS: ftp: loaded support on port[0] = 21 [ 1223.057799][T12848] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:57:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd60, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="c700000036002908000000000000000003400000180000003b000001"], 0xfde8}, 0x1, 0xffffff7f0e000000}, 0x0) [ 1223.223191][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1223.229356][T12859] netlink: 115 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1223.229488][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1223.246469][T12860] netlink: 115 bytes leftover after parsing attributes in process `syz-executor.4'. 11:57:46 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r0, &(0x7f0000001080)=@un=@file={0x2, './file0\x00'}, 0x80) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) [ 1223.303259][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1223.309713][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:57:46 executing program 2: getpid() r0 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x1000000000015) 11:57:46 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600), 0x0, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:57:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = accept$inet(r0, 0x0, &(0x7f0000000080)) recvmmsg(r1, &(0x7f0000003140), 0x4, 0x43, 0x0) dup(0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='status\x00') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x0) 11:57:46 executing program 5: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x4fe381) r2 = gettid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000000200)={0x7}) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r3 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r4 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x40, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000140)=r5) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:57:46 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r6 = eventfd(0x0) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f00000002c0)={r5}) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000080)={r6}) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000000)={r6}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r12 = eventfd(0x0) ioctl$KVM_IRQFD(r10, 0x4020ae76, &(0x7f00000002c0)={r11}) ioctl$KVM_IRQFD(r10, 0x4020ae76, &(0x7f0000000080)={r12}) ioctl$KVM_IRQFD(r10, 0x4020ae76, &(0x7f0000000000)={r12}) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r14, 0xae60) ioctl$KVM_IRQFD(r14, 0x4020ae76, &(0x7f00000002c0)={r15}) dup(r15) r16 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r16, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x0) r17 = socket$inet6_dccp(0xa, 0x6, 0x0) write$binfmt_elf64(r17, &(0x7f0000000180)=ANY=[@ANYBLOB="060000000000000005d1ad42d4dc450600b69607ffddbd9fe715e2be0df8a89e1e337dbbb5ce00dd674cc6"], 0x9) r18 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r18, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r19 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r20 = ioctl$KVM_CREATE_VM(r19, 0xae01, 0x0) r21 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r20, 0xae60) r22 = eventfd(0x0) ioctl$KVM_IRQFD(r20, 0x4020ae76, &(0x7f00000002c0)={r21}) ioctl$KVM_IRQFD(r20, 0x4020ae76, &(0x7f0000000080)={r22}) ioctl$KVM_IRQFD(r20, 0x4020ae76, &(0x7f0000000000)={r22}) r23 = socket$inet_smc(0x2b, 0x1, 0x0) close(r23) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 1223.888723][T12857] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:57:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0xfffffffffffffffe}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r3, &(0x7f0000000000)=""/37, 0x25) getdents(r3, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x802, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r8, 0x4, 0x100000000) 11:57:47 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x0) 11:57:47 executing program 5: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) r2 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000010}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x2c, r3, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x140}, 0x20000000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r4 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 1224.517930][T12902] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:57:47 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600), 0x0, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="5c0000007d020000005500f9ff1f000000200100000005000000000000000000a8440000000004000000810000000000000013002c2d76626f786e6574315829766d6e6574312900000500706b6373310a002f6465762f7662692300378157bc95bf615c9a57972cb29214f390a5bedcd489525528e46f545da3015df5c38d9558807b913977619d01bbf9d32b88e6a5c65b3942a1e197b3ce36e757413da13ff2f7cbb9949d5ca8f88c9c7b667033359aa682b56dc43212eeb8b6a64916c0c964efe379fd2624758e331b26e60ace63ce74edf854c2dfb72fe02248be6541ddd0f76b847224d4d74a8a72c06317959044251f53abe327f11939fa8c8234037b6106df5753d1cc7203e1e4bdbee80466165554c43c11056a607a63f8a17d5630e6ea719124494d"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:57:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028344c000c00010065727370616e00001800020004001200080005000000000008000400000000001aebf0284b5514c08315187fca5957dabc1b8a48913531716aa1a394f1fc1cd50b34d77bbf3d1a427d0512bc4276af78f5e8dbd2cbde947cf70aedbc4d9277937863ab7b2bf567912f50ff07c8abee7a6268d7af709b5814b9d59c2754a5949e3230345c141ff9bbb1dde40e39bbbcc5f082c6b8d35d"], 0x48}}, 0x0) [ 1224.813952][T12902] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1224.916746][T12922] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 11:57:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000780)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000010000105000000000000000000000000f0ed5e185c2b1c6ece9bdc7bf4b197fd6fdb09e465949b6807743801345220d87307a1a4b52a53c61a2eab6170abecfcf6272706e44c178623a3dc43ddd47983c8e7357f7962db7a03e8940f5034efbd259d739ebfbbbbb628ecc14eb9e1c508269b64896a3787e6e2b69c27852bf3807253c6931d56536ef47c37e608a3c4f4605995fc4f0cd17c5e4becc44cbbf6c711f941f6011d52b2d225a98fb0adfd97224365e0a9d5e2455e4c3504fdee4ba9f4e4528b980b30ac7a5476908d9e5520513b2375f18b7002e1b64b2db58aff9346bced40c3dce1c8dc", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012000800010076746900240002000800060009000000080006000000000008000200b00600000800020000000000"], 0x50}}, 0x0) [ 1225.238341][T12925] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. 11:57:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r3 = socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r5 = accept4$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000280)=0x10, 0x800) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000002c0)={0x0, 0x6141}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000340)={r6, 0x8}, 0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r7, &(0x7f0000000000)=""/37, 0x25) getdents(r7, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket(0xa, 0x802, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r11, 0xae80, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r12, 0x4, 0x100000000) [ 1225.286089][T12927] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1225.359642][T12929] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:57:48 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x0) 11:57:48 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='\xd6\xd5', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10}, 0x70) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x800, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@empty}, &(0x7f00000000c0)=0x14) 11:57:48 executing program 5: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) syz_open_procfs(r0, &(0x7f0000000080)='fdinfo\x00') timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:57:48 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast1, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000140)=0xe8) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000006c0)={0x0, 0x0, [], @bt={0x9, 0x0, 0x5, 0x85a7, 0x1000, 0x80008000000000, 0x10, 0x2}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x5, @vbi}) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200000, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x1d) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000580)={0x0, 0x1, 0x0, [{0x0, 0x9, 0x401, 0x91, 0x4, 0xe2}]}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000280)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x618a44, 0x0) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f0000000780)) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000340)=""/255) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='loginuid\x00') ptrace$cont(0x3, 0x0, 0x0, 0x0) write$vnet(r4, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r5, 0x894c, &(0x7f0000000440)=0xffffff42) unshare(0x40000000) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000600)={0x3, 0x0, [{0x40000006, 0x1, 0x1, 0x3, 0x4, 0x2ae, 0x7}, {0x6, 0xe, 0xa, 0x6, 0x1ff, 0x1, 0x20}, {0xc0000001, 0x1, 0x4, 0x7, 0x1000, 0x80000000, 0x4}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0xf, 0x808, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r6, &(0x7f0000000040), 0x0}, 0x20) sendfile(r6, r4, &(0x7f0000000000), 0x20000000000000) 11:57:48 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cd", 0x69, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") [ 1225.686229][T12930] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1225.854420][T12952] IPVS: ftp: loaded support on port[0] = 21 11:57:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, &(0x7f00000000c0)=0x3bfb, 0x4) getdents64(r3, &(0x7f0000000000)=""/37, 0x25) getdents(r3, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x802, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r8, 0x4, 0x100000000) [ 1226.220680][T12960] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1226.413696][T12952] IPVS: ftp: loaded support on port[0] = 21 11:57:49 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x0) 11:57:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r2, &(0x7f0000000000)=""/37, 0x25) getdents(r2, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0xa, 0x802, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000100)='/d{v/vbi#\x00', 0x1, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) setsockopt$netlink_NETLINK_RX_RING(r6, 0x10e, 0x6, &(0x7f00000000c0)={0x1ff, 0x2, 0x101, 0x1ff}, 0x10) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce], 0x0, 0x180810}) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r8, 0x4, 0x100000000) 11:57:49 executing program 5: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x7949e175bfba5482, @time={0x0, 0x989680}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x6, 0x1e1680) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r6 = eventfd(0x0) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f00000002c0)={r5}) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000080)={r6}) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000000)={r6}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") mq_open(&(0x7f00000000c0)='queue1\x00', 0x0, 0x12, &(0x7f0000000140)={0xe1c5, 0x3, 0x0, 0x1, 0x8, 0x9, 0x100000001, 0x6}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r8 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0xf8a, 0x40) r9 = dup2(r1, r8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r9, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r9, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:57:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x7, &(0x7f0000000240)=[{0x0, 0xff, 0x83, 0x2}, {0xd1, 0x5, 0x0, 0x2f8}, {0x6, 0x7f, 0x5, 0x24c}, {0x40, 0x40, 0x7}, {0x6, 0x9, 0x7, 0x5}, {0x9, 0x96, 0x81, 0xfffffff9}, {0x7, 0x1, 0x6}]}) sendfile(r2, r3, 0x0, 0x3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000040)=r6, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000001c0)={r6, 0x2, 0x90}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={r6, @in6={{0xa, 0x4e21, 0x1, @mcast1, 0x5}}}, &(0x7f0000000200)=0x84) r7 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3, 0x4000) ioctl$EVIOCGABS20(r7, 0x80184560, &(0x7f00000000c0)=""/78) r8 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r8, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r8, 0x4) r9 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 11:57:49 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cd", 0x69, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:57:50 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r1, &(0x7f0000003300)=[{{&(0x7f0000000340)={0xa, 0x4e24, 0x7, @rand_addr="3af4cde78a93bb9f301d077db113e414", 0xfffffff9}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000380)="c7236f1155f3bd4bc553aa527e87360b61d97520c25497677c81d27f2dc49c444671000834c6e34817982c05ca38703ca072cb0c753e92ec51cf29d1262770687fa17de47858ba43f934ec413a58145c4c8e5670bcea613380f3a8488d36832aca8b7289348b0bf3b2f8866e4273d049f037a46bc7f6107a5e000d80c42695a915a544d51fb69416f247e3aea327fb576d74d4a7927216d93ea84ebc583d9e69ac295c721fb822fab2deb0817c4a18f7115d38ba191e1693ca2d1a8d41bfb215e0a84995e899b0de54590163b06b0e1f1eadd4e5e8", 0xd5}, {&(0x7f0000000580)="07f5302a9151ed5d62990a66dc65e639b4728f4212c6819563db0131e6801f3c6fb3bd18b3ea7c8db2f8903eb2afbfda279cfadbf72b9e572df5753a5b2d73326e1c49c481d209b32190aad8c2", 0x4d}, {&(0x7f0000000600)="b81765f20ee53251beed25da2debdabcbd46280b2a0972e42779911f163bdffc4d3cc9b346d2f8a82d72d88f1fbb4f863f3594b1276b8c26b357e354b09063c2f51f", 0x42}, {&(0x7f0000000680)="8f7b3cc6738e9537a467cba4d0d5dc44e5f1d7ef5d4f4408f6e9f0c293a2f9a8dfd5cb01310177936effccfa76ef062cca7e1e7d00d7ded78679693f3c3f9a67f9e2a777d015b72c0753eff6b00cdf0f88f99f38a287685d1e8231e698fe42fc8f47527b91c9ce5a0a733ca91bc787329adbe47e987ad648ce7f773b78e6ad58d2a77983a9eea08a9deac5d16a71cfa015a471f1fc6ce0e53932311a", 0x9c}], 0x4, &(0x7f0000000780)=[@hopopts_2292={{0x28, 0x29, 0x36, {0x12, 0x1, [], [@generic={0x3, 0xd, "cadf8e0b6497ff1e756d19fe2c"}]}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x2c, 0x2, [], [@hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x26}}]}}}, @dstopts={{0xe0, 0x29, 0x37, {0x2, 0x18, [], [@jumbo={0xc2, 0x4, 0x9}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @pad1, @generic={0x6, 0xa8, "c244e738b611a8bfcb9d842d82dc0614dae98712385e77edff2977a5a847f8e044c79e30eb38d3c2adc77bc35b1aed7f64d0d5a014b521924aba69c4839be33abfec65c9211948556c7e1679cf4eb1f800e6b82a5f4026cbacd37194c838bafa5de885ccd0ea23ac33e9594a4337fb06e87d1e4e52e0d2ead7dc0d4e5f6d98e031f319c36892385df7c067e885ee2165848cc96baf2df1485853400d485fa7be1f89343eebf63b53"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}, @flowinfo={{0x14, 0x29, 0xb, 0x80}}], 0x180}}, {{&(0x7f0000000900)={0xa, 0x4e21, 0x2f, @mcast1}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000940)="eacb25a38640f92d950194c2907063ca7c97375ed520347283819d418ed89518e05c73234a3fbca4505a62608dcf26e7da72f1163f25f32fc844bc20df645469d5b541d7e05af60f753123ad09e44111987da9013aed488ab0f7aab9ad151d8a92b0d3a1a9af35d6aac58ddc00a9869a480bdbd9800062973076889fab9c1ac176c8440e35341e", 0x87}], 0x1, &(0x7f0000000a40)=[@rthdrdstopts={{0x28, 0x29, 0x37, {0x1d, 0x1, [], [@padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim, @enc_lim={0x4, 0x1, 0xf7}]}}}, @rthdrdstopts={{0x10f8, 0x29, 0x37, {0x30, 0x21b, [], [@pad1, @ra={0x5, 0x2, 0x9}, @enc_lim={0x4, 0x1, 0x2}, @generic={0x6, 0xc2, "a33e5d398ff937fa5684ba1bdc7493f5352d4c6e4930311794c2c8e7fb5e239c38cd9db224b8984715ac9c8f4db161fb7613594558559214a3802db3965d7725dc10d8558f48707e5d80f0cd8f50dc1df3844b068346fbeb54c070680de7421a6317dc4e2586d7e9730bfa43eef36de1a47d0709ddc853088472edbeeb666b3451edfd4068dd64198545228350edfa79483072ba93524fa1bfe901740c30422276fe403e9077655072bc5798ae73bccd2f929efc8414923f118fdc7bf2a071865bd1"}, @generic={0x12, 0x1000, "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"}, @enc_lim={0x4, 0x1, 0xff}, @jumbo={0xc2, 0x4, 0x1}]}}}, @rthdrdstopts={{0x90, 0x29, 0x37, {0x1d, 0xe, [], [@jumbo={0xc2, 0x4, 0x7ff}, @enc_lim={0x4, 0x1, 0x4}, @hao={0xc9, 0x10, @local}, @calipso={0x7, 0x50, {0x1, 0x12, 0x3f, 0x1, [0x4, 0x7, 0x80000000, 0x5, 0x80000001, 0x5, 0x1ff, 0x1f6, 0xd7]}}, @ra={0x5, 0x2, 0x5}]}}}], 0x11b0}}, {{&(0x7f0000001c00)={0xa, 0x4e21, 0x1, @mcast1, 0x4}, 0x1c, &(0x7f0000002e40)=[{&(0x7f0000001c40)="8e23bc41b5133d60409afb4d3a782b0f8926eead1424e9af530f4bb4253dde9936f61ff864a0fc28a7bb84fb432449ca2fc6ee06e8de66dd3e69b33411c9c1056853050aa02863599196ea0444a5", 0x4e}, {&(0x7f0000001cc0)="512919e4cc534c506dfce07d82e190ca0a3977d42cbd0d502570a195fb5377d6c104016698eac94164c873dcf034b52433f49119598b6b724f16089428de749566d223d3c6782019bfcd82cbaba778758d23e842d8feecbdcd098505064ad3ecc8c146ea4d323ec068ce5b15849c3d0e76d7e2fe82cd3770e1974aaeda60f896dd3f686e5c36252a5d5699", 0x8b}, {&(0x7f0000001d80)="78c7ca4f3dc56e2128ea32c085a95c99a505aae8ff75e4a54f5f3aad4973077961b5fd26955dcd19fa1cb5e291812f001c121078b2e084988953f357ab6109915e6c657c7f96305742536568b9376a1a1dda002fd8918f31a7be", 0x5a}, {&(0x7f0000001e00)="bdf61b26790a4309d7f98d66f1590a7cc02e126788b7dc45e05a4ca000fc13a3a5d830056b972a3103cc8446ce90f7eb", 0x30}, {&(0x7f0000001e40)="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", 0x1000}], 0x5, &(0x7f0000002ec0)=[@hopopts={{0x28, 0x29, 0x36, {0x2c, 0x1, [], [@pad1, @jumbo={0xc2, 0x4, 0x4}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x8, 0x2, [], [@ra={0x5, 0x2, 0x9}, @padn, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x1}, @ra={0x5, 0x2, 0x8000}]}}}, @dstopts={{0x118, 0x29, 0x37, {0x8, 0x1f, [], [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x7}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x3, 0x89, "7fc61150721f6d66527f9b8dde334515cb88d0d7d0976d8549a4904b6a98aeefe519ed1567de7243b97dfd81e2f1e3c89395351faddab5856270453eccd878dab10f3b85790a2b35ce628a1712a2aba583abf148d7eb67c32105601b1c3921d0646bca7ac830005dbce23817c822f6c4639a3df2cec953344941b210829523f52bb87620e9537c2af0"}, @calipso={0x7, 0x30, {0x87d, 0xa, 0xfa, 0x8001, [0x2, 0x7, 0xf221, 0x1f, 0x1]}}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x28}}, @pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @tclass={{0x14, 0x29, 0x43, 0x5}}, @hopopts={{0xb8, 0x29, 0x36, {0x72, 0x14, [], [@calipso={0x7, 0x40, {0x1, 0xe, 0x80, 0x1ff, [0x3, 0xffffffffffffffff, 0x80000000, 0x10000, 0x10000, 0x6, 0x4]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x3, 0x56, "1c376c9cad78835bfbee3b73b6d44a61c8480f67929752d14eaf7d85906620ec870dd5c136348c4814f7b3959471e9d4c50ea8bd7d47611dfa70881d527123d6ddf4870f537875252d936122889f24f6cfcdbdd91a4e"}]}}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x6c, 0x2, [], [@hao={0xc9, 0x10, @loopback}]}}}, @hopopts={{0x30, 0x29, 0x36, {0x73, 0x2, [], [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x6}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1]}}}], 0x2e8}}, {{&(0x7f00000031c0)={0xa, 0x4e21, 0xb3, @dev={0xfe, 0x80, [], 0x27}}, 0x1c, &(0x7f00000032c0)=[{&(0x7f0000003200)="7168c046fc4bca53928e93de569786ebff8b0856a256b211de702ba2b2c130b09b83c2900aa968e59ae00d0ca70eb7f755aabb5129359b416975c4921246a121513dfa526d73a2d6028bef2d0631d4685e5dde0a4402e44be95a6dcf831de08a338e011647fc6ae4b2744cbe910b45b584d829e7f080b0bcb987d5f8e7c1d4a93a9a15cd7a52aee0e4c66ee953e52f2490bc4701510da7b2164d75cbbda35cf7ff7620884a1e247efa", 0xa9}], 0x1}}], 0x4, 0x8040000) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x2, 0x40000) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) getsockopt$inet6_dccp_buf(r3, 0x21, 0x80, &(0x7f0000000080)=""/83, &(0x7f0000000180)=0x53) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003400)='/dev/sequencer2\x00', 0x110102, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r6, 0x23f, 0x0, 0x0, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000003500)={&(0x7f0000003440)={0x10, 0x0, 0x0, 0x745c4cc69705f53c}, 0xc, &(0x7f00000034c0)={&(0x7f0000003480)={0x28, r6, 0x4, 0x70bd2d, 0x25dfdbff, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000003540)=ANY=[@ANYBLOB="850000002e00000064000000001b7913e8392abb0dd7c58294936616cba83d9c9500000000000000b256daa3bd52fba574e463a991d345020a0d606d3b9165e2fbe12aa9b1ef1bf6d1402928882f11bfa11791f1a54d540fb72e3fdfbf2ccb9d27c1082b5bcbb20157dabbb279e7ee6a933464af90ef5fd8a0223fecd935d6b61248d62fcdb86339a9e84e9ad2b98f98d26b7ab4b63618e0fdcebc863350ff7cbf1a977e07683119"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1bd}, 0x2d) 11:57:50 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xc}, [@ldst={0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', r1}) 11:57:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x30a, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x1, 0x4000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r3, &(0x7f0000000000)=""/37, 0x25) getdents(r3, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x802, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r8, 0x4, 0x100000000) [ 1227.462895][ C0] net_ratelimit: 18 callbacks suppressed [ 1227.462917][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1227.474900][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1227.502239][T12993] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:57:50 executing program 2 (fault-call:5 fault-nth:0): r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 1227.638659][T12996] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:57:50 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cd", 0x69, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:57:50 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x0) write(r0, &(0x7f0000000180)="d66f13e48e26cfb74706ae97e0aaa9448d5bb4935993c39c845cae910751fe4d223cb552f4e1992081ebcd97b690a09015455ee6776d1af4cb1eba308e7674f9921550bd2e677d3160f46642b3434771f36bb2fabf9b6e919d80c83c62ba30c05f5c32ee6d473d79817a0bceafa8679f73dbc512995f0fd2a5d3ea150f07479104e429dfab8cb9da1a570d1a0815983b6a319e17afac93be7b1efce3f809784a149944ab1af2f8ce357347f6e21662ccdeba92abc83fbc53e9b914fd135967030c45c8372873b6a35269d173db9f318df6c9e40eea16687dc54ffd5a3e179b5694bef3cc0f7d81d0f81cbca797afc702a695f99c", 0xf4) syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x23, 0x847, 0x0, 0x0, {0x2804, 0x0, 0x4f290200}, [@nested={0x4, 0xf}]}, 0x18}}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x2c6, r2, 0x200, 0x70bd2a, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r3 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_linger(r3, 0x1, 0x1e, &(0x7f0000000340), &(0x7f0000000380)=0x8) r4 = accept$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000002c0)=0x1c) setsockopt$inet6_dccp_int(r4, 0x21, 0x3, &(0x7f0000000300)=0x80000001, 0x4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000f12000)={0x400000010, 0x0, 0x0, 0x70a1}, 0xc) r7 = dup(r6) getsockopt$netlink(r7, 0x10e, 0x9, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x346) ioctl$VIDIOC_TRY_ENCODER_CMD(r7, 0xc028564e, &(0x7f0000000500)={0x2, 0x1, [0x0, 0x1, 0x5, 0x9, 0x80, 0x80000001, 0x3f, 0x2]}) accept4(r5, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000440)=0x80, 0x80000) connect$pptp(r8, &(0x7f0000000480)={0x18, 0x2, {0x2, @rand_addr=0x10000}}, 0x1e) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000640)) bind$netlink(r9, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8002600}, 0xc) rt_sigpending(&(0x7f00000004c0), 0x8) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0xc) [ 1228.024630][T13010] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 11:57:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r3, &(0x7f0000000000)=""/37, 0x25) getdents(r3, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x802, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) r8 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$RTC_PLL_SET(r8, 0x40207012, &(0x7f00000000c0)={0xffc, 0x20, 0x3ff, 0x2, 0x0, 0x20, 0x72b8}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r9, 0x4, 0x100000000) [ 1228.185851][T13014] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:57:51 executing program 5: r0 = getpid() r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x801c0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r3, 0x23f, 0x0, 0x0, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}}, 0x800) r4 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r4, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r5 = dup2(r4, r4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r5, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r5, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:57:51 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x39, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 1228.672959][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1228.679250][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1228.685819][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1228.692013][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1228.698551][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1228.704898][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:57:51 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c0", 0x9d, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="5c0000007d020000005500f9ff1f000000200100000005000000000000000000a8440000000004000000810000000000000013002c2d76626f786e6574315829766d6e6574312900000500706b6373310a002f6465762f7662692300378157bc95bf615c9a57972cb29214f390a5bedcd489525528e46f545da3015df5c38d9558807b913977619d01bbf9d32b88e6a5c65b3942a1e197b3ce36e757413da13ff2f7cbb9949d5ca8f88c9c7b667033359aa682b56dc43212eeb8b6a64916c0c964efe379fd2624758e331b26e60ace63ce74edf854c2dfb72fe02248be6541ddd0f76b847224d4d74a8a72c06317959044251f53abe327f11939fa8c8234037b6106df5753d1cc7203e1e4bdbee80466165554c43c11056a607a63f8a17d5630e6ea719124494d"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:57:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f0000000400)="003fe804b5a44317552b3fbb2310574998d8bf07dfd87a3363980d30297ebec7c4ae5b74d70571a6d83a72adfa566745deca02aa08233d2ea81deca17b81609c0fcea8bf5bbb84713d79a0c756cf1e8aaecf04144f0d8a709c3f07bbfb83b97cab04d029e9b4ed52cd89d7d5203827eb761d71dcd13d4948424f8a9089a209c134cfc3e84d8ab269a74714e999fdbc6e467ae3c478b52cd8ef374b43a7c92db26018e03c8dd9d6d074dea5becfd4221c7fae7a0e7ecf3bb6480c75ecdf453c11", 0xfc83, 0xffffffffffffffff) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) setns(r3, 0x10000) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r4, &(0x7f0000000000)=""/37, 0x25) getdents(r4, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0xa, 0x802, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x3, 0x0, 0xffff, 0x0, 0xe818, 0xfffffffffffffffe, 0x0, 0x0, 0x8c2b, 0x0, 0x7fffffff]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r10, 0x4, 0x100000000) 11:57:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f0000000100)={0x80000000, 0x0, "e2481e5c959ed0c1d7c3b344a41c184fde1748dc385cebc443bde51e85fbd5cc", 0xffff, 0x712, 0x3, 0x0, 0x1f, 0x0, 0x3, 0x0, [0x8000, 0x0, 0x0, 0x5]}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x0, 0x0, 0x100000003, 0x0, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240)=0x200, 0x4000000000dc) r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000002c0)={r3}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000080)={r4}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r4}) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000280)) r5 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f00000002c0)={r8}) ioctl$VHOST_SET_VRING_CALL(r5, 0x4008af21, &(0x7f00000000c0)={0x1, r8}) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0x2, 0x8001]) r9 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'@\x0e\x00', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r10 = socket(0x10, 0x3, 0x0) write(r10, &(0x7f0000000040)="240000001a005f0214f9f407000904001100000000000001000200000800040003000000", 0x24) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000580), &(0x7f00000005c0)=0xfffffffffffffd5e) keyctl$get_persistent(0x16, 0x0, r9) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) [ 1229.094985][T13033] validate_nla: 1 callbacks suppressed [ 1229.095006][T13033] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1229.462942][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1229.469169][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:57:52 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000006d80)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000280)=""/244}, {&(0x7f00000006c0)=""/150}, {&(0x7f0000000780)=""/226}, {&(0x7f0000000880)=""/136}, {&(0x7f0000000940)=""/205}, {&(0x7f00000001c0)=""/12}, {&(0x7f0000000a40)=""/195}, {&(0x7f0000000b40)=""/49}, {&(0x7f0000006fc0)=""/49}, {&(0x7f0000000bc0)=""/86}], 0x0, &(0x7f0000001fc0)=""/4096}, 0x3}, {{&(0x7f0000000d00)=@generic, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d80)=""/111}, {&(0x7f0000000e00)=""/1}], 0x0, &(0x7f0000000e80)=""/213}, 0x7ff}, {{&(0x7f0000002fc0)=@hci, 0x0, &(0x7f0000000f80)=[{&(0x7f0000003040)=""/93}, {&(0x7f00000030c0)=""/132}, {&(0x7f0000003800)=""/4096}, {&(0x7f0000003180)=""/135}], 0x0, &(0x7f0000003240)=""/90}, 0x6}, {{&(0x7f00000032c0)=@tipc, 0x0, &(0x7f0000003580)=[{&(0x7f0000003340)=""/157}, {&(0x7f0000003400)=""/79}, {&(0x7f0000003480)=""/27}, {&(0x7f00000034c0)=""/77}, {&(0x7f0000004800)=""/4096}, {&(0x7f0000003540)=""/23}]}, 0x7}, {{&(0x7f0000003600)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x0, &(0x7f0000005a80)=[{&(0x7f0000003680)=""/17}, {&(0x7f0000005800)=""/194}, {&(0x7f0000003740)=""/114}, {&(0x7f0000005900)=""/198}, {&(0x7f0000005a00)=""/71}], 0x0, &(0x7f0000005b00)=""/212}, 0x7}, {{&(0x7f0000005c00)=@l2, 0x0, &(0x7f0000005e80)=[{&(0x7f00000036c0)=""/8}, {&(0x7f0000005c80)=""/138}, {&(0x7f0000005d40)=""/92}, {&(0x7f0000005dc0)=""/66}, {&(0x7f0000005e40)=""/2}], 0xdf, &(0x7f0000005f00)=""/25}, 0x3}, {{&(0x7f0000005f40)=@vsock, 0x0, &(0x7f0000006300)=[{&(0x7f0000005fc0)=""/136}, {&(0x7f0000006080)=""/65}, {&(0x7f0000006100)=""/38}, {&(0x7f0000006140)=""/111}, {&(0x7f00000061c0)=""/28}, {&(0x7f0000006200)=""/254}], 0x0, &(0x7f0000006380)=""/79}, 0x9}, {{&(0x7f0000006400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x0, &(0x7f0000006980)=[{&(0x7f0000006480)=""/79}, {&(0x7f0000006500)=""/192}, {&(0x7f00000065c0)=""/215}, {&(0x7f00000066c0)=""/91}, {&(0x7f0000006740)=""/219}, {&(0x7f0000006840)=""/233}, {&(0x7f0000006940)=""/30}], 0x0, &(0x7f0000006a00)=""/52}, 0x5}, {{&(0x7f0000006a40)=@hci, 0x0, &(0x7f0000006d40)=[{&(0x7f0000006ac0)=""/165}, {&(0x7f0000006b80)=""/169}, {&(0x7f0000006c40)=""/26}, {&(0x7f0000006c80)=""/179}]}, 0x3ff}], 0x35a4f67fb172b62, 0x0, &(0x7f0000003700)={0x77359400}) 11:57:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f00000000c0)={'ipvs\x00'}, &(0x7f0000000280)=0x1e) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r2 = syz_open_procfs(0x0, 0x0) sendfile(r0, r2, &(0x7f0000000240)=0x200, 0x4000000000dc) r3 = socket$inet(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x226, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r4, &(0x7f0000000000)=""/37, 0x25) getdents(r4, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x5c1d}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0xa, 0x802, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(r1, &(0x7f0000000700)="515ce794263a049a27da90b58ce568fd6197eb1cd18664addf3ef6bd256b23b3bda059d3533f74d228bb49d0ee1f6824fcbfd5252c392187965872e03b000440ed0a26b5c3eacf63c6f6c68a6a8091d46bddb7c41ad14176dc4db1adf17beb7f000000793aa20ad118842778944a4f0d6e442cd450d7791c723e5775ef86a460d11997ac676615bcd57890b10cbf5217eb1644513843e94d0d4a72c41e94b7a76907715baa18e26f6a32d1d5d40ce4f9901e221b911e523aa945ef1ee2dc8977164f9115d2b0692b279fbf5f01be", 0xffffffffffffff54) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0, 0x231}], 0x1, 0x6a430b7b9b74e9e9, 0x0, 0xffffffffffffff4c) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r9, 0x4, 0x100000000) 11:57:52 executing program 5: r0 = getpid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x203, r1) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000200)=0xfffffffffffffffe, 0x4) r3 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r4 = dup2(r3, r3) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r5 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$VIDIOC_DECODER_CMD(r5, 0xc0485660, &(0x7f0000000280)={0xe4c7fd977c2e7134, 0x2, @start={0x6, 0x1}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f00000000c0)={@host}) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080)=0x7, 0x4) [ 1229.750052][T13050] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:57:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r3}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000014000105000020000000000002000000", @ANYRES32=r3, @ANYBLOB="08000200e0000001"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x3a1, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b}\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\x80\x00>\xc7\xab2,\xa0\x84v\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef\x01\xfe\x91\xb4\xf3(', 0x80000, 0x0, 0x0, 0x0, 0x0, [], r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x4}, 0x10}, 0x70) 11:57:52 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c0", 0x9d, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") [ 1229.982177][T13060] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:57:53 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000480)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x4c8], 0x12000}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 11:57:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r2 = syz_open_procfs(0x0, 0x0) sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc) r3 = socket$inet(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r4, &(0x7f0000000000)=""/37, 0x25) getdents(r4, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0xa, 0x802, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r9, 0x4, 0x100000000) 11:57:53 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@mcast1, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0x29}, 0x0, r1}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x301000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0, r2}, 0x68) [ 1230.381860][T13069] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1230.581421][T13072] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:57:54 executing program 2: r0 = getpid() timer_create(0x6, &(0x7f00000000c0)={0x0, 0x2a, 0x0, @thr={&(0x7f0000000280)="028c3db9a2c4e9253ed200c8cda3ec7df31e1d3b90d9d56532040068a7ee27796c608d54ea9eaf4a93bc7e7d9c0411d11fc33f9358b45f9d0574462cdf1a955e25f72d71c8c0adc77ab496d0b9b01d28382015d24002d0ed92ebece87adf416475411acc91a425e6fb463b88c0390c5f898dabe338a8ff9dc889f1a9d1d30035ef18a4a490b9ca255611dc2df8bc45", &(0x7f0000000340)="6879262b88b4ed5c1654206711a666168b4a87043fabb1927a683d31adec254c674754ca2f4106a190e971fa10331b8005cfff13d1e477f75fd1c2779afcc204c6ddbf571bc60c48608775e2260f822c020569ff1fc78274df9c4b14b0f23073cef93b59c424b7495fb5388c6a6405e359092a5f021a595f507bcd319348803abf0522b6f60ee0af7e303897f5ec5af82b1534bd0bfd0fbdf85906255fbc2918d3ae4b89f90fb08d55914ca3eb6f6813a2ca83cd60e4a01d0486a9"}}, &(0x7f0000000140)) r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) write$P9_RWRITE(r2, &(0x7f0000000080)={0xb, 0x77, 0x101, 0x7}, 0xb) tkill(r0, 0x1000000000015) 11:57:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000002c0)={r4}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000100)={0x0, r5, 0x20, 0x3, 0x5, 0xff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="850000002e0000002400000000000000950000005a5756cdd268afbed6e0000000"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) 11:57:54 executing program 5: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) prctl$PR_SET_FPEXC(0xc, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x20002, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) read(r2, &(0x7f00000000c0)=""/32, 0xa6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r3 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:57:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) bind$isdn_base(r1, &(0x7f00000000c0)={0x22, 0x6, 0x1f, 0x1f, 0x4}, 0x6) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r3, &(0x7f0000000000)=""/37, 0x25) getdents(r3, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x802, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r8, 0x4, 0x100000000) 11:57:54 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c0", 0x9d, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") [ 1231.936402][T13086] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1232.225479][T13092] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:57:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r3, &(0x7f0000000000)=""/37, 0x25) getdents(r3, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x802, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r8, 0x4, 0x100000000) [ 1232.535601][T13097] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1232.822794][ C1] net_ratelimit: 12 callbacks suppressed [ 1232.822815][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1232.834849][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1232.841120][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1232.847344][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1232.853674][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1232.859796][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:57:55 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4", 0xb7, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:57:56 executing program 5: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) rt_tgsigqueueinfo(r2, r3, 0x17, &(0x7f0000000280)={0x36, 0x1, 0x9}) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r4 = dup2(r1, r1) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x0) timer_create(0x6, &(0x7f0000000080)={0x0, 0x38, 0x6, @tid=r5}, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:57:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffe18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) r3 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000280)={'veth0_to_hsr\x00', {0x2, 0x4e22, @loopback}}) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000002c0)) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x0) r6 = syz_open_procfs(r5, &(0x7f0000000300)='net/mcfilter6\x00') getdents64(r6, &(0x7f0000000000)=""/37, 0x25) getdents(r6, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket(0xa, 0x802, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce, 0x1000000000]}) ioctl$KVM_RUN(r10, 0xae80, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r11, 0x4, 0x100000000) 11:57:56 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/\x9fn$/seq\x00', 0x0, 0x12080) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000340)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x20, 0x0, 0x0, 'queue1\x00'}) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000000280)={0x5, 0x0, 'client1\x00', 0x9, "fec40fc32f368a19", "942e5f2d83444d1f6de599394a5c63e22a4119bb7f6175287d4027fe0a6e0679", 0x3, 0xa6}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 1233.334862][T13119] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:57:56 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001b6, @time}) r2 = dup2(r1, r1) r3 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x5546dde1f358de75) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000200)={0x2d, 0x4, 0x0, {0x0, 0x8001, 0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2d) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:57:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = eventfd(0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000002c0)={r4}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000080)={r5}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r5}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x110429d93f290a94, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r3, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800160006000000"], 0x3c}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0xd3, 0x0) r7 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000fff000/0x1000)=nil) shmat(r7, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$IPC_INFO(r7, 0x3, &(0x7f0000000000)=""/75) 11:57:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x880}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmsg(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000500)="240000000e0607031dfffd946fa2830020200a0009000100061d48c27978b640bb6ef210", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r5, &(0x7f0000000000)=""/37, 0x25) getdents(r5, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0xa, 0x802, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c000004000000000300000004000000000000020100149b284300"], &(0x7f0000000280)=""/198, 0x27, 0xc6}, 0x20) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r10, 0x4, 0x100000000) [ 1233.622982][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1233.629232][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1233.703739][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1233.710639][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:57:56 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) prctl$PR_SET_FPEXC(0xc, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x20002, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) read(r2, &(0x7f00000000c0)=""/32, 0xa6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r3 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:57:56 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4", 0xb7, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:57:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0xdf42a1dc21d07731, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r3, &(0x7f0000000000)=""/37, 0x25) getdents(r3, &(0x7f0000000040)=""/123, 0x7b) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0xa4000, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x21, 0x0, r1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x802, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r8, 0x4, 0x100000000) 11:57:57 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x11100) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SCSI_IOCTL_SYNC(r2, 0x4) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:57:57 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) msgctl$MSG_INFO(0xffffffffffffffff, 0xc, &(0x7f0000000080)=""/1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:57:57 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4", 0xb7, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="5c0000007d020000005500f9ff1f000000200100000005000000000000000000a8440000000004000000810000000000000013002c2d76626f786e6574315829766d6e6574312900000500706b6373310a002f6465762f7662692300378157bc95bf615c9a57972cb29214f390a5bedcd489525528e46f545da3015df5c38d9558807b913977619d01bbf9d32b88e6a5c65b3942a1e197b3ce36e757413da13ff2f7cbb9949d5ca8f88c9c7b667033359aa682b56dc43212eeb8b6a64916c0c964efe379fd2624758e331b26e60ace63ce74edf854c2dfb72fe02248be6541ddd0f76b847224d4d74a8a72c06317959044251f53abe327f11939fa8c8234037b6106df5753d1cc7203e1e4bdbee80466165554c43c11056a607a63f8a17d5630e6ea719124494d"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:57:57 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) prctl$PR_SET_FPEXC(0xc, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x20002, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) read(r2, &(0x7f00000000c0)=""/32, 0xa6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r3 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:57:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) memfd_create(&(0x7f00000000c0)='syz', 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000002c0)={r3}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x4010, r3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r4 = syz_open_procfs(0x0, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000280)=0xffffffff80001001, 0x2) r5 = socket$inet(0x10, 0x3, 0xc) sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r4, 0xc0485619, &(0x7f0000000080)={0x17, 0x2000, "6c08b21e0cabdf0fa2ed4c0000008068380d7f8ebeb9e3be", {0x4, 0x9}}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r6, &(0x7f0000000000)=""/37, 0x25) getdents(r6, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2bb) r7 = socket(0xa, 0x802, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r11, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$ASHMEM_SET_NAME(r11, 0x41007701, &(0x7f00000002c0)='&@-wlan1self\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200], 0x3000, 0x80}) ioctl$KVM_RUN(r10, 0xae80, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r12, 0x4, 0x100000000) [ 1235.128441][T13162] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:57:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r3, &(0x7f0000000000)=""/37, 0x25) getdents(r3, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x802, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x7d830882b3cd1da8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="f0010000", @ANYRES16=r9, @ANYBLOB="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"], 0x1f0}, 0x1, 0x0, 0x0, 0x40004}, 0x800) ptrace$pokeuser(0x6, r8, 0x4, 0x100000000) [ 1235.656394][T13167] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:57:58 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b", 0xc4, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:57:58 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) prctl$PR_SET_FPEXC(0xc, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x20002, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) read(r2, &(0x7f00000000c0)=""/32, 0xa6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r3 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:57:59 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3, @tick, 0x0, {0x4}, 0x0, 0x2}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x2, 0x8000, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) r3 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x7, 0x2) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000280)={0x3, @sliced={0xfff, [0x5, 0x80, 0x2, 0x1, 0x5, 0x1, 0x0, 0x1f, 0x401, 0x81, 0xfff9, 0x8, 0x800, 0x8, 0x30e6, 0x3ff, 0x7f, 0xaf, 0x1, 0x7, 0x3, 0xfffb, 0x9, 0x7, 0x1ff, 0x1f3, 0xc000, 0x1ff, 0x1, 0x40, 0x1, 0x6, 0x0, 0x3, 0x0, 0x2, 0x1, 0x8001, 0xb919, 0x8, 0x1, 0x2, 0x4, 0x3, 0xdb9, 0x4, 0xffff, 0x6], 0x6}}) [ 1235.964815][T13171] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:57:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0xd, 0xa) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r3, &(0x7f0000000000)=""/37, 0x25) getdents(r3, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x802, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r8, 0x4, 0x100000000) 11:57:59 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180), &(0x7f00000001c0)=0x4) rt_tgsigqueueinfo(r2, r2, 0x4000000000015, &(0x7f0000000100)) r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000080)={r4}) ptrace(0x10, r2) ptrace$getsig(0x4209, r2, 0x760004, 0x0) [ 1236.221014][T13184] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:57:59 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x10100, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x4000000000015, &(0x7f0000000100)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") getsockname$inet(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) ptrace(0x10, r3) ptrace$getsig(0x4209, r3, 0x760004, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$VIDIOC_ENUMINPUT(r5, 0xc050561a, &(0x7f0000000180)={0x0, "cf9b6548cc1f00000000000000504d3806acad8d00009e88aee46d5ce4df00", 0x2, 0x9d1, 0x2, 0x194000, 0x4000000, 0x4}) 11:57:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r3, &(0x7f0000000000)=""/37, 0x25) getdents(r3, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x802, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f00000000c0)={0x0, 0x0, 0x100, 0x1, {0x400, 0x7, 0xa60e61cd, 0x6bc}}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r8, 0x4, 0x100000000) 11:57:59 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b", 0xc4, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:57:59 executing program 4: getpid() r0 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) prctl$PR_SET_FPEXC(0xc, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x20002, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) read(r1, &(0x7f00000000c0)=""/32, 0xa6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) [ 1236.865046][T13346] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:00 executing program 3: socket$inet_sctp(0x2, 0x0, 0x84) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$getsig(0x4209, r1, 0x760004, 0x0) 11:58:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r3, &(0x7f0000000000)=""/37, 0x25) getdents(r3, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x802, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x40, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r8, 0x4, 0x100000000) 11:58:00 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) pwritev(r2, &(0x7f0000000680)=[{&(0x7f0000000180)="4240327ec3d5153444a88f986380d2e6cd66381654c54d538a2627d33c8bb31dde28fff7f3e146a9ab26070978a65690dba6b7130cdf29dd20a2093a409a46ad2a0b1341b83c91d30a3481afa886549777e565198db03aa0bedc9f6553ca1144ae7c41df27a9cd708c8b1d1f1486c64bd50588809b3cbe29af90ce7677b006", 0x7f}, {&(0x7f0000000200)="f203644aa53090e66ab9f9ea5eaf77313ad2e972ce931f31c40ce79ce90b5b441cc00bc207f9e78627c33730fcbf05e52fdbf5e58c5590da1e2d232449a11ea2fc5f068a0465bd6df1588ab2c9cf2d52390cd9ceb6b924ed40e33e65e85f83f85b320515", 0x64}, {&(0x7f0000000280)="d74f25f48fbcafd0307420855b9c2c9df00da4bffdb87d1b30d2fe9447d79b24db723283078241cd0034bab21c28a3c88cbb2802de781416f0702eeb9e2de511bf51296c9da6620b8f816ba6577ed4114d0972e8e1c93cee1d113fe8159ed7d257f44acebc4f31010bf5cf85981affbc01d822645544fd29cd7b61e5c0de457732cabe818e4103425f7501defbddfa14c304078e85125cd6721177cd33af55c1e104ec604882c039d7fcc9ead9df568e3722", 0xb2}, {&(0x7f0000000340)="31203b17e55ab8b4a6ebcf6e776714f20db55c009a6403a69987917f95c8749c333a23afa89ee3beec1e715f3363341bf91639989cb4c28f29441fa43cf75d3993fa2c0c6414d7505e1dba", 0x4b}, {&(0x7f00000003c0)="3d3d586968f80836a246f6e18b60db9c7fe16e759262e0886b05cb3af48435d933220129b9c043382eb35bad20b668c3ac00a51387299ce242eae1f2a773e68e8ff56361432f49a62259e3ecf2c730662c3b7a1944294cd2ba5a841d92346208a76089a41e9b0becdf0c2fe8a306a477f6743b92713489b8a49acc5fa84c9a3ba3373b126462e4cf263214696b9e06064934ab1f2b415669e325a588211bcc7cade415ee038d861e57f710cff8ca1b4587a6f6adcb4d18b4057bade98b10e7cad79ce2a905a030720af35465c86ed3ca322636bb319edfc20dd0172512af9fa94e3be8083fab3044", 0xe8}, {&(0x7f00000004c0)="9cae3fd5ab133b8fed7a2c9b01fe68bfb92b8a5e35e2bbe80b2c66df4e86a5e37e4e7eabd3842749b4ae84b914f8aa40dd67b32413cd7ca0745bc23dd66df85b5b1512b259fe7dc320cbb52049c23219191b120ef27576cfd365c03575b0f8a306dfe85724f47855e7599e624fbb954f95c341ec24f5e8ea4b4ab949d12e5786220da0d9210660dea4d5f19a9f34b6a854c41538277e78b60993a6ee3cd5cd3e95ec63759c1a1b4c5202d590cf6e54182628bdc872a4f096b7afadacfdc162f9b7d52b8eb45e7720040c15cd6e33f6cee327ed15e901d6d7f7b9c11c9d4d207a69ea63324b1f1b9a", 0xe8}, {&(0x7f00000005c0)="021633e938cc98922c54587329791aa7a0bebdeacb2be816b72d2f6197be7b5122fe788bf7aa7eb32c36f496fbc8c577f586dbdebe4ef14ddba68113db232211c097022d91b2ecc6e6c0c591dca6b549e9bcba9131d25dfd7c98b000b6c323036020955a17ccba4976e774f893fdb86869e2d8eb7739bd57096c2b0970fce0cad4", 0x81}, {&(0x7f0000000080)="165ea5cbd095624de2bde062d50496", 0xf}], 0x8, 0x9) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$getsig(0x4209, r3, 0x760004, 0x0) [ 1237.372275][T13519] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1237.610935][T13584] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r3, &(0x7f0000000000)=""/37, 0x25) getdents(r3, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x802, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000280)) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r8, 0x4, 0x100000000) 11:58:00 executing program 3: inotify_init1(0x80c00) r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) accept4$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r2) socket$bt_hidp(0x1f, 0x3, 0x6) socket$rds(0x15, 0x5, 0x0) ptrace$getsig(0x4209, r2, 0x760004, 0x0) 11:58:00 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b", 0xc4, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:58:00 executing program 4: getpid() r0 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) prctl$PR_SET_FPEXC(0xc, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x20002, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) read(r1, &(0x7f00000000c0)=""/32, 0xa6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) [ 1237.837229][T13629] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1237.862786][ C0] net_ratelimit: 18 callbacks suppressed [ 1237.862807][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1237.874854][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:58:01 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x4, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r2) ptrace$getsig(0x4209, r2, 0x760004, 0x0) 11:58:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x83a903d4f67556b9, 0x0, 0x0, 0x400000000}, 0x20) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000240)=0x200, 0x4000000000dc) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f00000009c0)={0x0, 0x115, &(0x7f0000000a00)=[{&(0x7f0000000c80)="b86700f25858fb11cc3f648ab836d14df01373c1c535419852eb542f097dd16d5ab5499f3bf5aa445b6b1a00854c416fbb93d11e3da790929929e497c16023cd1c467d6f0e76d93433af4b669b3c88e782a11806c58c4d86cb243c7d7ac5146b08385fa6bf8c8748802e19566cc349e2d83a380921de179d5933839420a7e700000000d8250c06b2143095925d0715f1708944f0eda3d4478c947cb089eccd31b77f732c3bf8ab1824e6fd93e8c2c52168cf85b85f24d2988469295b5f12350abce7ba2638931c01a028535acebe284697bb1cd5f5"}], 0x0, 0x0, 0xfffffffffffffef3}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r1], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be", {0x0, 0x40000000}}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r2, &(0x7f0000000000)=""/37, 0x25) getdents(r2, &(0x7f0000000d80)=""/131, 0x52) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) syz_open_dev$admmidi(&(0x7f0000000280)='/dev/admmidi#\x00', 0x3, 0x80) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r7 = eventfd(0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f00000002c0)={r6}) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000080)={r7}) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000000)={r7}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0xffffffffffffff39) r8 = socket(0xa, 0x802, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/btrfs-control\x00', 0x800, 0x0) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000300)=r11) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r12 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000900)={0x0, 0x1ac9df2180745d51, 0x89, 0x1f, @scatter={0x5, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000000340)=""/57, 0x39}, {&(0x7f0000000a80)=""/209, 0xcb}, {&(0x7f0000000580)=""/175, 0xaf}, {&(0x7f0000000640)=""/217, 0xfffffffffffffea7}]}, &(0x7f0000000740)="3cd0f7275e5bc40c6514e7182250f7746c01c488ddfe1b4a79ef9a4a0e9c00c21b03a008c6b67752dc7a37c1ffa51e9ef256917f0fc7e5ab0cc2528eb4403b343d5dfca61e98e237d2d4669f9c3d4ecfd631951a1f74f0265ccdc91a7c8b472e840d95f062bb793bdb055aaf7b4fcdd96554d8119c9dc44015a72d4f038ade1fbbd5b05e18678decd4", &(0x7f0000000800)=""/134, 0xccf, 0x20001, 0x0, &(0x7f00000008c0)}) ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r12, 0xae80, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r13, 0x4, 0x100000000) 11:58:01 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200102064fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r2) ptrace$getsig(0x4209, r2, 0x760004, 0x0) 11:58:01 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636", 0xcb, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:58:01 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000000)={0x1, 0x7c, 0x9, 0x0, 0x1}) clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r2) ptrace$getsig(0x4209, r2, 0x760004, 0x0) 11:58:02 executing program 4: getpid() r0 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) prctl$PR_SET_FPEXC(0xc, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x20002, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) read(r1, &(0x7f00000000c0)=""/32, 0xa6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 11:58:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='\xbc\x00\x1f\x00\b\x00', 0xfffffffffffdfffe, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r3, &(0x7f0000000000)=""/37, 0x25) getdents(r3, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x802, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) mq_timedreceive(r6, &(0x7f0000000280)=""/168, 0xa8, 0x6, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f00000000c0)=0xd) ptrace$pokeuser(0x6, r8, 0x4, 0x100000000) [ 1239.059712][T13993] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1239.072808][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1239.079095][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1239.085552][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1239.091822][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1239.098354][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1239.104648][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1239.277023][T13993] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:02 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) r1 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x7fff, 0x2}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$getsig(0x4209, r3, 0x760004, 0x0) 11:58:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x0, 0xc) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmsg(r1, &(0x7f0000011fc8)={0x0, 0xaf40a80d1188fc22, &(0x7f0000009ff0), 0x416bfff}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4000140}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r4, &(0x7f0000000000)=""/37, 0x25) getdents(r4, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x802, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r9, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r10 = syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0x8, 0x200000) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f00000004c0)=0xffffffffffffff0d) ptrace$pokeuser(0x6, r11, 0x4, 0x100000000) r12 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x7, 0x40) getsockopt$IP6T_SO_GET_REVISION_TARGET(r12, 0x29, 0x45, &(0x7f0000000280)={'icmp6\x00'}, &(0x7f00000002c0)=0x1e) 11:58:02 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000002c0)="0800a1695e1dcfe87b1071b07f96caa10817072f3829876cb81355268255bbf006dedbf74fd4305dcf1d6d3b9f83b6b5f0738bbf13fd3cb186da4f3f84bb0a3d85b56476fb17e5e4f72a638dfe512caa00d42b0000000000000000000000000000000015ea3bb2ff50518b1b7a4bee59f4a40825fc565cac511c047e5ba500d37a00fea5a514b8388b7b1d48613f788677b3fc6eabe57b4b3292df68e420e80861f081b283ef96d5d991b791c619da790007a5673e7f31aea79e07e7e903e7b8544380d6195581c00cc02176e275e0641238817ea46752eea18f44835bbac515942669cc3e0499a435dca6d9b7a90f11f892474e3aa010bf60757548763f427db6ae737ecf7dd3cb6441f84b662b121fcb01b343d4f6e5ebf49586f22687fb070f6edf47eae7f5fefc718e1759a7ed2ac7faab561139fb4b21e58633b20723de260cda709e918e6c062bd0b0641ac31b40616b620fa4a64e5d4acbe0caefef166771d8271c106757c08e3080ed7ab60a91b39b55d29a81000000000000004eaa16e9ac665a5508deb214c1c9dfe1777d1cf914257b6ee285a2f3513b741b346a0793bf954e489222051a1197d540e6dfcd9c79b6af1b44af5a460288dfc3dd82fc91e1d6a0799db70a9f5e151fc3342cf693f2a2d984604e05ae0650853500"/492) clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r2) ptrace$getsig(0x4209, r2, 0x760004, 0x0) [ 1239.863053][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1239.869373][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:58:02 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636", 0xcb, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:58:02 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) prctl$PR_SET_FPEXC(0xc, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x20002, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) read(r2, &(0x7f00000000c0)=""/32, 0xa6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r3 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) tkill(r0, 0x1000000000015) 11:58:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r3, &(0x7f0000000000)=""/37, 0x25) getdents(r3, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd37, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x802, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r11 = eventfd(0x0) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f00000002c0)={r10}) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f0000000080)={r11}) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f0000000000)={r11}) syz_kvm_setup_cpu$x86(r9, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000580)="66450f73d59ec7442400a1000000c744240200000100ff1c24450f01d1c744240000a00000c74424021af937ddc7442406000000000f011c240f35c4228dabef660f3881511ac839c9423e42d9e9f2650f2216"}], 0xaaaaaaaaaaaabe9, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r12 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r12, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r12, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000fe9000/0x2000)=nil, 0x2000}, &(0x7f0000000280)=0x10) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r13, 0x4, 0x100000000) 11:58:03 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r2) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r5 = dup3(r4, r1, 0x80000) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xe7, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$NBD_SET_TIMEOUT(r3, 0xab09, 0x5) r6 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000080)={0x7, 0x80000000}) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x70000000}, &(0x7f0000000040)=0x8) ptrace$getsig(0x4209, r2, 0x760004, 0x0) 11:58:03 executing program 3: r0 = socket$inet_sctp(0x2, 0xb, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r2) ptrace$getsig(0x4209, r2, 0x760004, 0x0) 11:58:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x1, 0xc4040) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r2 = syz_open_procfs(0x0, 0x0) sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc) r3 = socket$inet(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r4, &(0x7f0000000000)=""/37, 0x25) getdents(r4, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0xa, 0x802, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r9, 0x4, 0x100000000) [ 1240.689178][T14475] validate_nla: 1 callbacks suppressed [ 1240.689201][T14475] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:03 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x100, 0x0) connect$rds(r1, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$getsig(0x4209, r3, 0x760004, 0x0) 11:58:03 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636", 0xcb, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") [ 1240.949191][T14523] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x2, {0x7}}, 0x18) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r4, &(0x7f0000000000)=""/37, 0x25) getdents(r4, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x802, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) socket$inet6_tcp(0xa, 0x1, 0x0) [ 1241.243627][T14619] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:04 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$void(0xffffffffffffffff, 0x5451) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000005c0)=""/243, 0xf3}, {&(0x7f00000006c0)=""/81, 0x51}, {&(0x7f0000000740)=""/183, 0xb7}, {&(0x7f0000000800)=""/218, 0xda}, {&(0x7f0000000900)=""/67, 0x43}, {&(0x7f0000000980)=""/231, 0xe7}, {&(0x7f0000000a80)=""/61, 0x3d}], 0x7, &(0x7f0000000540)=""/73, 0x49}, 0x40000081) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000400)={'team0\x00', r3}) clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x1d, &(0x7f0000000180)) ptrace(0x10, r4) ptrace$getsig(0x4209, r4, 0x760004, 0x0) 11:58:04 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x84c0000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r2, 0x200, 0x70bd28, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40084) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$getsig(0x4209, r3, 0x760004, 0x0) 11:58:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000014000/0x600000)=nil, 0x600000, 0x1000000, 0x1090, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = eventfd(0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000002c0)={r4}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000080)={r5}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r5}) sendfile(r5, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r6], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ioctl$sock_netdev_private(r7, 0x89f1, &(0x7f00000000c0)) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r8, &(0x7f0000000000)=""/37, 0x25) getdents(r8, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket(0xa, 0x802, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r12, 0xae80, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r13, 0x4, 0x100000000) 11:58:05 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d39553", 0xce, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") [ 1242.047767][T14836] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1242.283544][T14839] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:06 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) prctl$PR_SET_FPEXC(0xc, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x20002, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) read(r2, &(0x7f00000000c0)=""/32, 0xa6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r3 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) tkill(r0, 0x1000000000015) 11:58:06 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r2 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000040)={0x0, 0xfffffff8}, 0x8) clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x4000000000015, &(0x7f0000000100)) ptrace(0x11, r3) ptrace$getsig(0x4209, r3, 0x760004, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000000)=0x7f) 11:58:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r3, &(0x7f0000000000)=""/37, 0x25) getdents(r3, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x802, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$VT_RESIZE(r8, 0x5609, &(0x7f00000000c0)={0x400, 0x3ff, 0x1}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r9, 0x4, 0x100000000) 11:58:06 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d39553", 0xce, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") [ 1243.148684][T14847] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1243.223269][ C1] net_ratelimit: 12 callbacks suppressed [ 1243.223401][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1243.236118][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1243.243564][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1243.250968][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1243.258248][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1243.265037][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:58:06 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r2) 11:58:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x801, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') r4 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/26, 0x1a) getdents(r3, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0xa, 0x802, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) sendfile(r6, r6, 0x0, 0x40fdf) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x1000) ioctl$BLKRESETZONE(r6, 0x40101283, &(0x7f00000000c0)={0x2, 0x7}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r10, 0x4, 0xffffffff) [ 1243.721006][T15021] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:06 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x35d, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r2) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc01050}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0xcc, r4, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x84, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x90a}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ptrace$getsig(0x4209, r2, 0x760004, 0x0) [ 1244.022897][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1244.029082][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:58:07 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d39553", 0xce, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:58:07 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") socket$nl_route(0x10, 0x3, 0x0) clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r2) ptrace$getsig(0x4209, r2, 0x760004, 0x0) 11:58:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r3, &(0x7f0000000000)=""/37, 0x25) getdents(r3, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x802, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r6 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$RTC_PLL_GET(r6, 0x80207011, &(0x7f00000000c0)) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r9, 0x4, 0x100000000) [ 1244.102780][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1244.108920][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1244.194894][T15173] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:07 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r2) ptrace$getsig(0x4209, r2, 0x760004, 0x0) setxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64MMAP\x00', &(0x7f0000000080)='vmnet1em1wlan1\x00', 0xf, 0x0) 11:58:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40481082}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r4, 0x100, 0x70bd29, 0x25dfdbfd, {{}, 0x0, 0x4107, 0x0, {0x14, 0x18, {0x5, @bearer=@l2={'ib', 0x3a, 'lapb0\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r5, &(0x7f0000000000)=""/37, 0x25) getdents(r5, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0xa, 0x802, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r10, 0x4, 0x100000000) [ 1244.795949][T15392] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1244.984163][T15394] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:09 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) prctl$PR_SET_FPEXC(0xc, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x20002, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) read(r2, &(0x7f00000000c0)=""/32, 0xa6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r3 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) tkill(r0, 0x1000000000015) 11:58:09 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1000, 0x101000) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000040)={0x1, 0x4, [0x3, 0x657, 0x5, 0x6, 0x1000], 0x1}) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$getsig(0x4209, r3, 0x760004, 0x0) 11:58:09 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa", 0xd0, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:58:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x3, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) eventfd(0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000002c0)={r4}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r8 = eventfd(0x0) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f00000002c0)={r7}) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000080)={r8}) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000000)={r8}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000080)={r8, 0x0, 0x2}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r12 = eventfd(0x0) ioctl$KVM_IRQFD(r10, 0x4020ae76, &(0x7f00000002c0)={r11}) ioctl$KVM_IRQFD(r10, 0x4020ae76, &(0x7f0000000080)={r12}) ioctl$KVM_IRQFD(r10, 0x4020ae76, &(0x7f0000000000)={r12}) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r14, 0xae60) ioctl$KVM_IRQFD(r14, 0x4020ae76, &(0x7f00000002c0)={r15}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r15, 0xfffffffe}) sendfile(r0, r3, &(0x7f0000000240)=0x200, 0x4000000000dc) r16 = socket$inet(0x10, 0x3, 0xc) sendmsg(r16, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r16], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r17 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r17, &(0x7f0000000000)=""/37, 0x25) getdents(r17, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r18 = socket(0xa, 0x802, 0x0) r19 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r20 = ioctl$KVM_CREATE_VM(r19, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r20, 0xae60) r21 = ioctl$KVM_CREATE_VCPU(r20, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r21, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r21, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) r22 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r22, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$SIOCGETLINKNAME(r22, 0x89e0, &(0x7f0000000280)={0x3, 0x2}) ioctl$KVM_RUN(r21, 0xae80, 0x0) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r23, 0x4, 0x100000000) 11:58:09 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x131c00, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r6, 0x23f, 0x0, 0x0, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) epoll_create1(0x2df557dd66ffa164) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r6, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x3, 0x3, @udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0xc000018) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r9 = eventfd(0x0) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f00000002c0)={r8}) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000080)={r9}) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000000)={r9}) lseek(r7, 0xff, 0x0) rt_tgsigqueueinfo(r2, r2, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r2) ptrace$getsig(0x4209, r2, 0x760004, 0x0) [ 1246.510191][T15403] irq bypass consumer (token 00000000870ad158) registration fails: -16 [ 1246.541764][T15403] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:09 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$getsig(0x4209, r1, 0x760004, 0x0) [ 1246.995233][T15403] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:10 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa", 0xd0, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:58:10 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) write$sndseq(0xffffffffffffffff, &(0x7f00000005c0)=[{0x9, 0x81, 0x41, 0x9b, @time={r4, r5+30000000}, {0x1, 0x3}, {0x8, 0x3}, @ext={0xce, &(0x7f0000000480)="a9b68ee2eb07b5cc5f027a7b2cdb584a39167cedce64d3be39d538e2bdaf5a0ebb9c898a63c2c0af14e4723a32bb107886e76d3d641b5d65cef96e146ad754173bc53c33c00cac0c3f65b64e05a55b2097c5f4da4d1eac8b3b4486f5cab5814d3b1f99c5c24695fe9b5e160cdab5fc88f2b3d9cc7c73b3735e611d11323d26d7cf84449714cef5b23af4da615003ab584bb7afc2e891f3996248a630ac252c802c3ff71ed9e8adc4c80a21409e11837c0892db1e83062b520a9d7eb5a0c4c07ecb76ae7e4ccea0a4ae3048df4cfb"}}, {0xff, 0x80, 0xfd, 0x9, @tick=0x3, {0x5, 0xff}, {0x20, 0x6}, @raw32={[0x1f, 0x4, 0xb1]}}, {0x7f, 0x8, 0x5, 0x1, @tick=0x3, {0x5, 0x3f}, {0x1f, 0x20}, @note={0x9, 0x1, 0x1, 0x17, 0x8}}, {0x0, 0x9, 0xa4, 0x1f, @time, {0x5, 0x6}, {0xc7, 0x7}, @quote={{0x0, 0x40}, 0x401, &(0x7f0000000580)={0x7d, 0x4, 0xff, 0x7, @tick=0x2678, {0x6, 0x4}, {0x1f, 0x3f}, @queue={0x8, {0x80}}}}}, {0x1, 0x3, 0x7f, 0xa6, @time={0x0, 0x1c9c380}, {0x1, 0x2a}, {0x7, 0xfd}, @raw8={"22135de0c86c344d6f73fe3d"}}], 0xf0) pselect6(0x40, &(0x7f0000000080)={0x80000001, 0x8, 0xaaf3, 0xdd3f, 0x7, 0x5, 0x9, 0x7}, &(0x7f0000000180)={0x200, 0x6, 0x7f, 0xfffffffffffffff7, 0x1, 0x10000, 0x7659, 0x2203}, &(0x7f0000000240)={0x9, 0x1, 0x101, 0x6, 0xdd, 0x80000000, 0x1, 0x6}, &(0x7f0000000280), &(0x7f0000000340)={&(0x7f00000002c0)={0x8}, 0x8}) r6 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r3, r6, 0x0, 0xffff) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x10, r8, 0x71ba5000) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r7, 0x84, 0x78, &(0x7f0000000040)=r10, 0x4) r11 = syz_open_dev$sndpcmp(&(0x7f00000003c0)='/dev/snd/pcmC#D#p\x00', 0x7, 0x80040) write$P9_RLOCK(r11, &(0x7f0000000400)={0x8, 0x35, 0x2, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000001c0)={r10, 0x2, 0x90}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r10, 0x4}, 0x8) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x4, 0xa, 0x4, &(0x7f0000000380)) r12 = getpid() rt_tgsigqueueinfo(r12, r12, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r12) ptrace$getsig(0x4209, r12, 0x760004, 0x0) 11:58:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r3, &(0x7f0000000000)=""/37, 0x25) getdents(r3, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r6, 0x1, 0x2e, &(0x7f0000000000), 0x20a1562f) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = eventfd(0x0) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f00000002c0)={r9}) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000080)={r10}) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000000)={r10}) r11 = socket$inet_dccp(0x2, 0x6, 0x0) sendfile(r11, r8, 0x0, 0x2ca07ffffe) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="e1a6e3b3", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r12, 0x84, 0x78, &(0x7f0000000040)=r14, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000001c0)={r14, 0x2, 0x90}, &(0x7f0000000200)=0x8) [ 1247.470666][T15741] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:10 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r2, r3, 0x0, 0xffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000040)=r6, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000001c0)={r6, 0x2, 0x90}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r6, 0x3}, 0xc) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = getpid() rt_tgsigqueueinfo(r7, r7, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r7) ptrace$getsig(0x4209, r7, 0x760004, 0x0) [ 1247.713489][T15834] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) r1 = getuid() write$P9_RGETATTR(r0, &(0x7f0000000280)={0xa0, 0x19, 0x1, {0x1000, {0x14, 0x0, 0x4}, 0x48, r1, 0xffffffffffffffff, 0x1, 0x430d313, 0x6c5d094d, 0x1, 0x8042, 0x7e5abbdc, 0x3, 0x2, 0x7d, 0x40, 0xffffffffffffffff, 0x8, 0x20, 0x8001, 0x1ff}}, 0xa0) r2 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r3 = syz_open_procfs(0x0, 0x0) sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc) r4 = socket$inet(0x10, 0x3, 0xc) sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r4], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r3, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r5, &(0x7f0000000340)=""/42, 0xfffffffffffffe96) getdents(r5, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0xa, 0x802, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r10, 0x4, 0x100000000) 11:58:11 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x4000000000015, &(0x7f0000000100)) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) r4 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) setsockopt$inet_dccp_int(r4, 0x21, 0x5, &(0x7f0000000040), 0x4) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000000)=[0x80, 0x1f]) ptrace(0x10, r2) ptrace$getsig(0x4209, r2, 0x760004, 0x0) [ 1248.069846][T15941] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1248.262966][ C0] net_ratelimit: 18 callbacks suppressed [ 1248.262988][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1248.275172][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1248.310565][T15941] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:12 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) prctl$PR_SET_FPEXC(0xc, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x20002, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) read(r2, &(0x7f00000000c0)=""/32, 0xa6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r3 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:58:12 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa", 0xd0, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:58:12 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r2) ptrace$getsig(0x4209, r2, 0x760004, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x8803) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, {0x3, 0xb6, 0x5, 0x9, 0x3, 0x7}, 0x7}, 0xa) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") recvmsg(r4, &(0x7f0000000a80)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000500)=""/8, 0x8}, {&(0x7f0000000540)=""/60, 0x3c}, {&(0x7f0000000580)=""/235, 0xeb}, {&(0x7f0000000680)=""/98, 0x62}, {&(0x7f0000000700)=""/39, 0x27}, {&(0x7f0000000740)=""/148, 0x94}, {&(0x7f0000000800)=""/47, 0x2f}, {&(0x7f0000000840)=""/152, 0x98}], 0x8, &(0x7f0000000980)=""/254, 0xfe}, 0x2042) getsockopt$inet_buf(r5, 0x0, 0x9, &(0x7f0000000ac0)=""/184, &(0x7f0000000b80)=0xb8) 11:58:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x7ffffffffffffff, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f00000000c0)={0x0, 0x3, 0x1}) r2 = syz_open_procfs(0x0, 0x0) sendfile(r0, r2, &(0x7f0000000240)=0x200, 0x4000000000dc) r3 = socket$inet(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1, 0x0, 0x220}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r4, &(0x7f0000000280)=""/40, 0x28) getdents(r4, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0xa, 0x802, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r9, 0x4, 0x100000000) [ 1249.462935][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1249.469338][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1249.475944][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1249.482229][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1249.488890][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1249.495324][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:58:12 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000040)=0x1, 0x4) rt_tgsigqueueinfo(r2, r2, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r2) ptrace$getsig(0x4209, r2, 0x760004, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) 11:58:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r3, &(0x7f0000000000)=""/37, 0x25) getdents(r3, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x802, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f00000000c0)=0xf610) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r8, 0x4, 0x100000000) [ 1249.768085][T16166] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:13 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x7fffffff, &(0x7f0000000000)="e32a02e5734e8885c44de2f781c335e5ccdf0b1ec4d8b3af2b3e3c383e56c92678f63b664e3030868989168da62cad9017c53fe53cbd44e1d1777512db433892262fd9a7ad657e3bfba43cd243f0dc") rt_tgsigqueueinfo(r2, r2, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r2) ptrace$getsig(0x4209, r2, 0x760004, 0x0) clone3(&(0x7f00000002c0)={0x800000, &(0x7f0000000080), &(0x7f0000000180), &(0x7f00000001c0)=0x0, 0x32, 0x0, &(0x7f0000000200)=""/120, 0x78, &(0x7f0000000280)=""/47}, 0x40) r5 = syz_open_dev$vbi(&(0x7f0000000300)='/dev/vbi#\x00', 0x0, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) kcmp(r3, r4, 0x1, r5, r6) 11:58:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='\x10s\x00') getdents64(r3, &(0x7f0000000000)=""/37, 0x25) getdents(r3, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x802, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r8, 0x4, 0x100000000) 11:58:13 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") [ 1250.262984][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1250.269187][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1250.281042][T16346] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:13 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x7, 0x8000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, r2, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x1, 0x1000, 0x7, 0x4, 0xefbc]}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1884, 0x1000, 0xfffffffe, 0x8, 0x80000001]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x9, 0x1000]}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x5, 0x5, 0x2f746465, 0x7fffffff]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2050c00}, 0x40000808) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$getsig(0x4209, r3, 0x760004, 0x0) [ 1250.443111][T16382] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x2, 0xff, 0x8, 0x0, 0x0, 0x400000000}, 0xffffffffffffff4a) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r3) add_key$user(&(0x7f0000000040)='\x8b\xa2\xcb\x96\xd4', &(0x7f0000000380)={'syz'}, &(0x7f0000000280)="76825e0f31e8e8e4edcd651d8554656f0a685b552f9ff8bedfea1342e9b7ba176a8a9af48339ebbff9608a9234f6559399c4f8f9ea65b6a457f44bf2f0d3320feab95d5a6f8f67ee92c4ac83ced06a57c45d0c52cae6d2a1d1bc8a37a4066801622bcb6202e88ed98ec9901d7647facaeb108e66d6b9e56df0d2442709e75960989f5b1cf7da13f9b6a208abc4468bc8f3b27403ad334bdb4075fcc4df4d672c38f0f28167b541a2f7f75f23ac753387ae262b670a3c083604495235", 0xbc, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r4, &(0x7f0000000000)=""/37, 0x25) getdents(r4, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0xa, 0x802, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r9, 0x4, 0x100000000) 11:58:13 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x10100, 0x0) clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000240)={0x8, @win={{0xffffffff, 0x3, 0xce, 0xffffffff}, 0x0, 0x8, &(0x7f0000000080)={{0x5, 0x6, 0x3, 0x6}, &(0x7f0000000040)={{0x4653, 0x20, 0x6, 0x1f}, &(0x7f0000000000)={{0x100, 0x80000000, 0x8, 0x8}}}}, 0x6, &(0x7f0000000180)="db3b97ed826bf1adaf44e302288aaff7245341eacc5c3e150d89c32bbb4ce67bc9d92ba687c391ed6f92e6ce6e5417713c4098b12957be0735fb9d814386a64f778b9409f05a5718c4adb02411a85cb87037175c40c67e6264a04fc7ed0bce8511d83f85d78548c226e13756279823d698f3cb3bbb230dc315d3f94040ba0a0432c30d98d0f00b17cb9522d13df8e8", 0x8d}}) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x1dcc) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r4) ptrace$getsig(0x4209, r4, 0x760004, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r6 = socket$isdn_base(0x22, 0x3, 0x0) getsockname(r6, &(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @remote}, &(0x7f0000000440)=0x80) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000380)) [ 1250.835916][T16487] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:15 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) prctl$PR_SET_FPEXC(0xc, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x20002, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) read(r2, &(0x7f00000000c0)=""/32, 0xa6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r3 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:58:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x6, r1}) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r3, &(0x7f0000000000)=""/37, 0x25) getdents(r3, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x802, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r8, 0x4, 0x100000000) 11:58:15 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="5c0000007d020000005500f9ff1f000000200100000005000000000000000000a8440000000004000000810000000000000013002c2d76626f786e6574315829766d6e6574312900000500706b6373310a002f6465762f7662692300378157bc95bf615c9a57972cb29214f390a5bedcd489525528e46f545da3015df5c38d9558807b913977619d01bbf9d32b88e6a5c65b3942a1e197b3ce36e757413da13ff2f7cbb9949d5ca8f88c9c7b667033359aa682b56dc43212eeb8b6a64916c0c964efe379fd2624758e331b26e60ace63ce74edf854c2dfb72fe02248be6541ddd0f76b847224d4d74a8a72c06317959044251f53abe327f11939fa8c8234037b6106df5753d1cc7203e1e4bdbee80466165554c43c11056a607a63f8a17d5630e6ea719124494d"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:58:15 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000000)={0x0, 0x95, 0x2, 'queue1\x00', 0xe875}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$getsig(0x4209, r3, 0x760004, 0x0) [ 1252.475244][T16599] validate_nla: 1 callbacks suppressed [ 1252.475266][T16599] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1252.737322][T16612] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:15 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$bt_rfcomm(0x1f, 0x3, 0x3) r2 = getpid() r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x800000, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x18) r4 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) getsockopt$inet_dccp_buf(r4, 0x21, 0xd, &(0x7f0000000000)=""/137, &(0x7f0000000180)=0x89) rt_tgsigqueueinfo(r2, r2, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r2) ptrace$getsig(0x4209, r2, 0x760004, 0x0) r5 = msgget$private(0x0, 0x80) msgctl$IPC_STAT(r5, 0x2, &(0x7f00000001c0)=""/9) 11:58:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r3 = socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRES16=r3], 0x1}}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r4, &(0x7f0000000000)=""/37, 0x25) getdents(r4, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0xa, 0x802, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) fchmodat(r4, &(0x7f00000000c0)='./file0\x00', 0x10) ptrace$pokeuser(0x6, r9, 0x4, 0x100000000) 11:58:16 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x44008ca0, 0x0, 0x3d9) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x4000000000015, &(0x7f0000000100)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x902a, 0x10000}, 0xc) ptrace(0x10, r2) ptrace$getsig(0x4209, r2, 0x760004, 0x0) [ 1253.108752][T16815] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1253.345466][T16874] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:16 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:58:16 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r3, r4, 0x0, 0xffff) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000040)=r7, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000001c0)={r7, 0x2, 0x90}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000180)={r7, @in6={{0xa, 0x4e20, 0x7fffffff, @empty, 0x1}}}, 0x84) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000000)={0x1c, 0x0, 0x1, {0x0, 0x2, 0x0, 0x2}}) r8 = getpid() rt_tgsigqueueinfo(r8, r8, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r8) ptrace$getsig(0x4209, r8, 0x760004, 0x0) 11:58:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r1], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\fW\xafYt|a\xa3\x16\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xcaPx\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc\xbfX\x12\x97\xb3\x1b\xea\xfa\xff\xb7gx\xa1\x96\xad\x93\xaa=-z\x06r\b\'') r4 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendfile(r3, r4, 0x0, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r7, &(0x7f0000000000)=""/37, 0x25) getdents(r7, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x5, 0x3, 0x40, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, &(0x7f0000000280), &(0x7f00000002c0)=0xffffffffffffffcb) socket(0xa, 0x802, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) [ 1253.606455][T16928] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1253.622865][ C1] net_ratelimit: 12 callbacks suppressed [ 1253.622886][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1253.635048][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1253.641434][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1253.647722][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1253.654175][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1253.660359][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:58:16 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000180)=""/222) r2 = accept$alg(r1, 0x0, 0x0) dup(r2) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = getpid() r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r5, 0x0, 0x0) rt_tgsigqueueinfo(r5, r4, 0x23, &(0x7f0000000100)={0x0, 0xfffffffe, 0x2}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) ptrace(0x10, r4) ptrace$getsig(0x4209, r4, 0x760004, 0x0) 11:58:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r3, &(0x7f0000000000)=""/37, 0x25) getdents(r3, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x802, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f00000000c0)=0x1, 0x4) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r9, 0x4, 0x100000000) [ 1254.030329][T17071] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1254.208508][T17139] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1254.422778][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1254.428892][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1254.502789][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1254.508904][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:58:18 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) prctl$PR_SET_FPEXC(0xc, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x20002, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) read(r2, &(0x7f00000000c0)=""/32, 0xa6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r3 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:58:18 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000180)="0833cc970c49ae360f5a5692fba142705e62cd852efaa4fa1525140b198c16b1f805a919530633be41f440a21097a0cc0fc73db744e730a757a832d2a4876eae4de691ea09aa5388d83d041dd007a0f151f453e8604ad87690006a7526550d7305a4") clone(0x20000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000200)=0x4) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000280), 0x24) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r7 = eventfd(0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f00000002c0)={r6}) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000080)={r7}) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000000)={r7}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f00000002c0)={r10}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000240)={0x2, r10}) r11 = getpid() rt_tgsigqueueinfo(r11, r11, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r11) ptrace$getsig(0x4209, r11, 0x760004, 0x0) 11:58:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x201700, "6c08b29e0cab2b99faccd9701056c7b347068ebeb9e3be00"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r3, &(0x7f0000000000)=""/37, 0x25) getdents(r3, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x802, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce, 0x0, 0x0, 0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r8, 0x4, 0x100000000) r9 = socket$kcm(0x29, 0xfe248ab012439bfb, 0x0) pwrite64(r9, &(0x7f00000000c0)="cd39801d53cba10345e9f6139407e13db421ce961c3e40bad9bc52f62be5b6c9c5f0312ecd4a92e2e132ed89f398196ef07d253e0eef8b2d", 0x38, 0x9) 11:58:18 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:58:18 executing program 5: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000080)={0x100000001, 0x0, 0x10001, 0x20}) ioctl$DRM_IOCTL_AGP_UNBIND(r3, 0x40106437, &(0x7f00000000c0)={r5, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 1255.567559][T17147] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:18 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:58:18 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000040)) r1 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000000)={'ip_vti0\x00', {0x2, 0x4e23, @remote}}) rt_tgsigqueueinfo(r3, r3, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r3) r4 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x17, 0x4, 0x5, 0x7, 0x0, 0x0, 0x8000, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xb0b, 0x1, @perf_config_ext={0x4, 0xbb1a62b}, 0x2, 0x80000001, 0x200, 0x6, 0x5, 0x86e, 0x800}, r3, 0x9, r4, 0x1) ptrace$getsig(0x4209, r3, 0x760004, 0x0) 11:58:18 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:58:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x3, 0x0) r0 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) syncfs(r0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r1 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r2 = syz_open_procfs(0x0, 0x0) sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc) r3 = socket$inet(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={0x0, {0x2, 0x4e23}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2, 0x0, 0x0, 0x0, 0xfffc, &(0x7f00000000c0)='veth0_to_hsr\x00', 0x8d30, 0x1000}) getdents64(r4, &(0x7f0000000000)=""/37, 0x25) getdents(r4, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x802, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) [ 1256.067026][T17313] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:19 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r2) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc40140}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0xa4, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/xfrm_stat\x00') readlinkat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0) ptrace$getsig(0x4209, r2, 0x760004, 0x0) 11:58:19 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000a80)={r5, 0x20}, &(0x7f0000000ac0)=0x8) r6 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r3, 0xae9a) r7 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r8, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r9 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r9, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") [ 1256.300720][T17398] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:19 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000a80)={r5, 0x20}, &(0x7f0000000ac0)=0x8) r6 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r3, 0xae9a) r7 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r8, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r9 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r9, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:58:21 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) prctl$PR_SET_FPEXC(0xc, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x20002, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) read(r2, &(0x7f00000000c0)=""/32, 0xa6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r3 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:58:21 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x8000) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1f, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r2) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) tkill(r3, 0x0) ptrace$getsig(0x4209, r2, 0x760004, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 11:58:21 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000a80)={r5, 0x20}, &(0x7f0000000ac0)=0x8) r6 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r3, 0xae9a) r7 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r8, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r9 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r9, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:58:21 executing program 5: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0xfffffffe, 'queue1\x00', 0x8}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000140)={&(0x7f0000000080)="9fe6e88809fe0fa3dd4be2bf34374ed70256fbb3b4a43ea22cad0e365f854d8566523544ae0eeadaf496f77f8fe885fabc0e782a9c03f227558ed9b7dc2aa0f5f21817635ba5c5e5d80ee7cf34c4c39c33ad63a2bc74715c2bb4827ec5e9316333da7438362d2d3a816466e61a91f6de830dd1b057bb3d8a2851600551", 0x7d}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_getoverrun(r3) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f00000008c0)) 11:58:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r3, &(0x7f0000000000)=""/37, 0x25) getdents(r3, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x802, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) r8 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RXATTRCREATE(r8, &(0x7f00000000c0)={0x7, 0x21, 0x1}, 0x7) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r9, 0x4, 0x100000000) 11:58:21 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x1, 0x5}) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f00000000c0)={0x8, r4}) r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)="df6fee083e79aecefe28fb22da9116e4466c786bf0cbd2d78893c01f30794b", 0x1f, 0xfffffffffffffffe) keyctl$invalidate(0x15, r5) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x180000a, 0x10010, r1, 0xfd85b000) 11:58:21 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="5c0000007d020000005500f9ff1f000000200100000005000000000000000000a8440000000004000000810000000000000013002c2d76626f786e6574315829766d6e6574312900000500706b6373310a002f6465762f7662692300378157bc95bf615c9a57972cb29214f390a5bedcd489525528e46f545da3015df5c38d9558807b913977619d01bbf9d32b88e6a5c65b3942a1e197b3ce36e757413da13ff2f7cbb9949d5ca8f88c9c7b667033359aa682b56dc43212eeb8b6a64916c0c964efe379fd2624758e331b26e60ace63ce74edf854c2dfb72fe02248be6541ddd0f76b847224d4d74a8a72c06317959044251f53abe327f11939fa8c8234037b6106df5753d1cc7203e1e4bdbee80466165554c43c11056a607a63f8a17d5630e6ea719124494d"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") [ 1258.610679][T17494] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1258.663305][ C0] net_ratelimit: 18 callbacks suppressed [ 1258.663328][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1258.675676][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1258.761584][T17595] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:21 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000000)={{0x88, @broadcast, 0x4e21, 0x0, 'lblcr\x00', 0x4, 0x0, 0x75}, {@remote, 0x4e22, 0x4, 0x572, 0x20, 0x9}}, 0x44) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$getsig(0x4209, r3, 0x760004, 0x0) 11:58:21 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:58:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r3, &(0x7f0000000000)=""/37, 0x25) getdents(r3, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x802, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x110402, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r8, 0x4018aee3, &(0x7f00000002c0)={0x0, 0x20, 0xfffffffffffffffe, &(0x7f0000000280)=0x1ff}) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r9, 0x4, 0x100000000) [ 1258.998336][T17618] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:22 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:58:22 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x4a82, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f0000000300)={0x9, 0x9, 0x10, "6c785bff225ddbac241ef890958aa1171f987f8c9b39921ea497d1aaf3bcb5a933e1fc9100e04a2820d584c621cb8588038fb08a3adf79b21465d15d", 0xa, "3981f64b937edc72e257e99fa75fd9e8770c76d493afd551b7e78658a1240260e1fe12b9066f91d3d3ad6a244987ba730b9dc50b0e95bd765292a858", 0x40}) socket$inet_udplite(0x2, 0x2, 0x88) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="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"]) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x101000, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r8 = eventfd(0x0) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f00000002c0)={r7}) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000080)={r8}) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000000)={r8}) dup3(r4, r8, 0x80000) r9 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r10 = eventfd(0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000002c0)={r9}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000080)={r10}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r10}) ioctl(r3, 0x6, &(0x7f00000000c0)="0a00a1695e1df7ff7b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r11 = getpid() rt_tgsigqueueinfo(r11, r11, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r11) ptrace$getsig(0x4209, r11, 0x760004, 0x0) 11:58:22 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) prctl$PR_SET_FPEXC(0xc, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x20002, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) read(r2, &(0x7f00000000c0)=""/32, 0xa6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) dup2(r1, r1) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:58:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x102800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r3, &(0x7f0000000000)=""/37, 0x25) getdents(r3, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x802, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = eventfd(0xa5c5) mmap(&(0x7f0000fe9000/0x1000)=nil, 0x1000, 0x1, 0x8010, r8, 0xee8db000) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r9, 0x4, 0x100000000) 11:58:22 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:58:22 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000080)) setsockopt$sock_void(r2, 0x1, 0x12, 0x0, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") sendfile(r3, r2, &(0x7f00000000c0)=0xa695, 0x8000) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 1259.564767][T17841] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:22 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000180)={r3, 0x2}, 0x8) socket$l2tp(0x18, 0x1, 0x1) socket$inet(0x2, 0x1, 0x9) r4 = getpid() prctl$PR_SET_KEEPCAPS(0x8, 0x1) rt_tgsigqueueinfo(r4, r4, 0x4000000000015, &(0x7f0000000100)) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000280)={'broute\x00', 0x0, 0x4, 0x2c, [], 0x7, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000240)=""/44}, &(0x7f0000000300)=0x78) ptrace(0x10, r4) ptrace$getsig(0x4209, r4, 0x760004, 0x0) 11:58:22 executing program 5: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000140)) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) timer_create(0x4, &(0x7f0000000200)={0x0, 0xf, 0x4, @tid=r3}, &(0x7f0000000280)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r4, 0x2d73e69b845e79df, &(0x7f0000000240)={{0x77359400}, {0x0, 0x989680}}, 0x0) io_setup(0x7, &(0x7f0000000080)) tkill(r0, 0x1000000000015) 11:58:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r1 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x7f8, 0x2, 0x2, 0x8, 0x0, 0x0, 0x400000000}, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f00000002c0)={r5, 0x0, 0x70a}) sendfile(r5, r0, &(0x7f0000000240)=0x6, 0x4000000000dc) r6 = socket$inet(0x10, 0x3, 0x4c) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r6], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r7, &(0x7f0000000000)=""/37, 0x25) getdents(r7, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket(0xa, 0x802, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaa9a7, 0x0, 0x0, 0x4f9) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0xfffffffffffffffe, 0x0, 0x0, 0x4ce, 0x0, 0x0, 0x0, 0xb2, 0x0, 0x4, 0x4], 0x0, 0x29000}) ioctl$KVM_RUN(r11, 0xae80, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xffffffffffffff0e) ptrace$pokeuser(0x6, r12, 0x4, 0x100000000) [ 1259.863196][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1259.869834][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1259.876527][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1259.882970][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1259.889509][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1259.896166][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:58:23 executing program 3: socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffc43, 0x4000000, 0x0, 0xffffffffffffff36) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r1) r2 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000000)={0x1}, 0x4) ptrace$getsig(0x4209, r1, 0x760004, 0x0) ioprio_get$pid(0x0, r1) [ 1260.346636][T17996] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 11:58:23 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:58:23 executing program 5: getpid() r0 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x8, 0x10002) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) eventfd(0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f00000037c0)={0x14, r5, 0x1}, 0x14}}, 0x0) accept4$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14, 0x800) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r9}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000014000105000020000000000002000000", @ANYRES32=r9, @ANYBLOB="08000200e0000001"], 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vxcan0\x00'}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="302000001000050700"/20, @ANYRES32=r13, @ANYBLOB="00000000000000001800120008000100767469000c00020008000100", @ANYRES32=r13], 0x38}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000014000105000020000000000002000000", @ANYRES32=r13, @ANYBLOB="08000200e0000001"], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 11:58:23 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) prctl$PR_SET_FPEXC(0xc, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x20002, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) read(r2, &(0x7f00000000c0)=""/32, 0xa6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:58:23 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@local, @in=@empty}}, {{@in=@broadcast}, 0x0, @in=@initdev}}, &(0x7f0000000000)=0xe8) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r4, 0x0, 0x0) tkill(r3, 0x8003d) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xf, 0x0, 0xe35, &(0x7f0000000200)="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") ptrace$cont(0x20, r3, 0x0, 0x0) rt_tgsigqueueinfo(r3, r2, 0x17, &(0x7f0000000100)={0x4001c, 0x8000}) ptrace(0x10, r2) ptrace$getsig(0x4209, r2, 0x760004, 0x0) 11:58:23 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) r3 = getpgrp(r0) prlimit64(r3, 0x8, &(0x7f00000000c0)={0x9, 0x1}, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{r4, r5+30000000}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 1260.662940][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1260.669322][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:58:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x9}, 0x240, 0x0, 0x0, 0x1}, 0x0, 0xa, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x1, 0x4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x800, 0x1, 0x100000003, 0xb, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r3, &(0x7f0000000000)=""/37, 0x25) getdents(r3, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x802, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000400)={[0x0, 0xffffffffffffffff, 0x802, 0x0, 0x0, 0x0, 0x4ce, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x2000000000000000]}) r8 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r8, 0xc0385720, &(0x7f0000000280)={0x1, {r9, r10+10000000}, 0x80000001}) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r11, 0x4, 0x100000000) 11:58:24 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_vif\x00') r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000180)={0xffffffffffffffff}, 0x0, {0xa, 0x4e22, 0x3, @loopback, 0xea}, r4}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000200)={0x11, 0x10, 0xfa00, {&(0x7f0000000080), r5}}, 0x18) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = getpid() r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f0000000000), 0x1) rt_tgsigqueueinfo(r6, r6, 0x4000000000015, &(0x7f0000000100)={0x400000}) ptrace(0x10, r6) ptrace$getsig(0x4209, r6, 0x760004, 0x0) [ 1260.928834][T18201] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1261.073509][T18209] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r3 = socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000280)=@req={0x28, &(0x7f00000000c0)={'ip6erspan0\x00', @ifru_addrs=@vsock={0x28, 0x0, 0x0, @host}}}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r4, &(0x7f0000000000)=""/37, 0x25) getdents(r4, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0xa, 0x802, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x1, 0x800, 0x0, 0x0, 0x0, 0x4ce, 0x78, 0xc0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r9, 0x4, 0x100000000) 11:58:24 executing program 3: socket$inet_sctp(0x2, 0x0, 0x84) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x4000000000015, &(0x7f0000000100)) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000080)) ptrace(0x10, r1) ptrace$getsig(0x4209, r1, 0x760004, 0x0) 11:58:24 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") [ 1261.358081][T18313] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:24 executing program 4: r0 = getpid() syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) prctl$PR_SET_FPEXC(0xc, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x20002, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) read(r1, &(0x7f00000000c0)=""/32, 0xa6) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:58:24 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x3, &(0x7f0000000080)) r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0xa, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:58:24 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() ptrace(0x10, r2) ptrace$getsig(0x4209, r2, 0x760004, 0x0) 11:58:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r3, &(0x7f0000000000)=""/37, 0x25) getdents(r3, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000280)=0x4) r5 = socket(0xa, 0x802, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r9, 0x4, 0x100000000) [ 1261.900406][T18508] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:25 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000040)={{0x16, 0xfffffffc}, 0x6}, 0x10) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$getsig(0x4209, r3, 0x760004, 0x0) [ 1262.016204][T18542] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r3, &(0x7f0000000000)=""/37, 0x25) getdents(r3, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x802, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) r8 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r9 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r8) r10 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r11 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r10, r11, r9}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\x00'}}) keyctl$revoke(0x3, r10) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r12, 0x4, 0x100000000) [ 1262.313478][T18637] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:26 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0xea, {{0x2, 0x4e22, @multicast1}}}, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r2) ptrace$getsig(0x4209, r2, 0x760004, 0x0) 11:58:26 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000080)) 11:58:26 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:58:26 executing program 4: r0 = getpid() syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) prctl$PR_SET_FPEXC(0xc, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x20002, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0)=""/32, 0xa6) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:58:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='\x00\b\x00', 0xff, 0x100) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040), &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r3, &(0x7f0000000000)=""/37, 0x25) getdents(r3, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x802, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r8, 0x4, 0x100000000) [ 1263.847537][T18657] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:26 executing program 4: r0 = getpid() syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) prctl$PR_SET_FPEXC(0xc, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x20002, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0)=""/32, 0xa6) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 1264.022974][ C1] net_ratelimit: 12 callbacks suppressed [ 1264.022997][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1264.035228][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1264.041710][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1264.048140][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1264.054667][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1264.060892][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:58:27 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$getsig(0x4209, r3, 0x760004, 0x0) [ 1264.167885][T18777] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r0 = syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000240)=0x200, 0x4000000000dc) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000280)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r1], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) rt_sigpending(&(0x7f00000000c0), 0x8) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6cf6179e0cab0a2b890000d9701056c7b347068ebeb9a3be", {0x200, 0xfffffffe}}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r2, &(0x7f0000000000)=""/37, 0x25) getdents(r2, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0xa, 0x802, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r7, 0x4, 0x100000000) 11:58:27 executing program 4: r0 = getpid() syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) prctl$PR_SET_FPEXC(0xc, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x20002, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0)=""/32, 0xa6) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:58:27 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r3) r5 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r4}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\x00'}}) keyctl$invalidate(0x15, r5) rt_tgsigqueueinfo(r2, r2, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r2) ptrace$getsig(0x4209, r2, 0x760004, 0x0) 11:58:27 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:58:27 executing program 5: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x8000, 0x10102) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f00000000c0)=[{0xfffc, 0x25, 0xff, 0xcc000000}, {0x400, 0x40, 0x0, 0x581d1f15}, {0x0, 0xbe, 0x7f, 0x4}]}, 0x10) r3 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x4, 0x48000) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(0x0, r7, r7) r8 = socket$kcm(0x29, 0x5, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSYMLINK(r9, &(0x7f0000000300)={0x14, 0x11, 0x1, {0x14, 0x2, 0x8}}, 0x14) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) setgid(r10) fchown(r4, r7, r10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 1264.809871][T18894] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1264.823175][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1264.829565][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:58:27 executing program 4: r0 = getpid() syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) prctl$PR_SET_FPEXC(0xc, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) read(r1, &(0x7f00000000c0)=""/32, 0xa6) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 1264.902950][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1264.909203][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:58:28 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:58:28 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) ioctl$KDSKBLED(r0, 0x4b65, 0x5) sendto$inet(r0, 0x0, 0xffffffffffffff9e, 0x20000080, 0x0, 0x30f) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x301000, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000180)={0xff, 0x0, [], {0x0, @reserved}}) r3 = getpid() r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r4, 0x0, 0x0) rt_tgsigqueueinfo(r3, r4, 0x4000000000015, &(0x7f0000000100)={0x13, 0xfffffffe, 0xfff}) ptrace(0x10, r3) ptrace$getsig(0x4209, r3, 0x760004, 0x0) [ 1265.087329][T18936] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:28 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) socketpair(0x1a, 0x801, 0x40, &(0x7f0000000200)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f00000002c0)={r4, r5/1000+30000}, 0x10) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) getpgid(r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r6 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r6, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$CAPI_SET_FLAGS(r7, 0x80044324, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r9, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) r11 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r11, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$VIDIOC_REQBUFS(r11, 0xc0145608, &(0x7f0000000340)={0x8, 0x8, 0x3}) timer_settime(r10, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r10, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$FUSE_OPEN(r6, &(0x7f00000000c0)={0x20, 0x0, 0x2, {0x0, 0x16}}, 0x20) tkill(r0, 0x1000000000015) 11:58:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r3, &(0x7f0000000000)=""/37, 0x25) getdents(r3, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x802, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r8, 0x4, 0x100000000) 11:58:28 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x40000, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000300)=0x261, 0x4) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3, @tick=0x3}) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0x0, {0x8001, 0x2, 0x10000000, 0x9d}}) r3 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) lsetxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='security.evm\x00', &(0x7f0000000280)=@v2={0x3, 0x1, 0x7, 0x80000001, 0x6a, "ffd60bcdad2e974c5e32f2a0b3683ae9a8c0338d2c3e225c81a72a93fea9c2b1aa2e9f9be03497315df71fe6bb4833af8071aa749a83691eaf624e4e825426c08b665e8a7ae666f47eea1301b36e730c9f3e38797d144c538c65ea32d1d54c0c336a0dccc4a33791e41e"}, 0x74, 0x1) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x690880, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r5, r6, 0x0, 0xffff) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r7, 0x84, 0x78, &(0x7f0000000040)=r9, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000001c0)={r9, 0x2, 0x90}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={r9, 0x7}, &(0x7f00000003c0)=0x8) 11:58:28 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r4, 0x0, 0x0) rt_tgsigqueueinfo(r2, r4, 0x215, &(0x7f0000000100)={0x0, 0x0, 0xcd7}) ptrace(0x10, r2) ptrace$getsig(0x4209, r2, 0x760004, 0x0) [ 1265.461373][T19122] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r3, &(0x7f0000000000)=""/37, 0x25) getdents(r3, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x9, 0xa, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f00000000c0)={0x0, 0x1000, 0xf5}) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r8, 0x4, 0x100000000) 11:58:29 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") mq_unlink(&(0x7f0000000000)='\x00') clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x2c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x7f, @rand_addr="6fb8e1a149156b552e6d3c9904357eaf", 0xfffffffa}, @in={0x2, 0x4e22, @rand_addr=0x8}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000001c0)={0x4, 0x40a, 0x8000, 0x7fffffff, r5}, 0x10) rt_tgsigqueueinfo(r2, r2, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r2) r6 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x80800) fdatasync(r6) ptrace$getsig(0x4209, r2, 0x760004, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0x2, 0x2) write$UHID_INPUT2(r7, &(0x7f0000000280)={0xc, 0x42, "68943ffe0c6aab9663694945afce60ce6bd9dd1ea3db792975e62533bb63ed2361973853a74b53d58e7f8df917fdf60b5918d40b39a349f38fb54274008fa009f024"}, 0x48) 11:58:29 executing program 4: r0 = getpid() syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) read(r1, &(0x7f00000000c0)=""/32, 0xa6) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:58:29 executing program 5: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) r2 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000280)="9369724743609fe9d6f97da3b33da1e1bf6f5808f078981fd61cf6ba8927e641e721a7096d1a9c392b309d6a35b006d4ef89c713c29e867a9c48a0fb472db5a1c12d2cd3621c6c6efde64fe5642485ef2b4ab71cb4fc10f729e66a88852c7d1d0d48aa7b69126c54c110a2a999151241c2655810fb70da9528a4b8c1b26a84e93fda6799d8591f4bcf6ecd4f7c7a38821b38d70ae28a0c6c4967279ccb28022c3bc178f4851b794fa28c15af7c0aaba3991ca4f9c70bdb2666c31fa4ee", 0xbd, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r3) r4 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r4) r5 = request_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)='/dev/snd/seq\x00', r4) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r5, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000080)={0x0, 0x7fff, 0xffffffff, 0x14000, 0x3, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r6 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r6, 0xc0a85320, &(0x7f00000004c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'}) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r7, 0x5382, &(0x7f0000000580)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r6, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f00000002c0)={r10}) fallocate(r10, 0x17, 0x7ff, 0x2) prctl$PR_CAPBSET_READ(0x17, 0x3) 11:58:29 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000a40)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={0x0, 0x20}, &(0x7f0000000ac0)=0x8) r6 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r7 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r8, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r9 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r9, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") [ 1266.008736][T19238] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:29 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r2) ptrace$getsig(0x4209, r2, 0x760004, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) renameat2(r3, &(0x7f0000000000)='./file0\x00', r4, &(0x7f0000000040)='./file0\x00', 0x1) 11:58:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f00000002c0)={r6}) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r6], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r7, &(0x7f0000000000)=""/37, 0x25) getdents(r7, &(0x7f0000000040)=""/123, 0x7b) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f00000000c0)='nr0\x00', 0x10) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket(0xa, 0x802, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r12, 0xae80, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r13, 0x4, 0x100000000) [ 1266.524784][T19392] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:29 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x4000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000280)={{0x9, 0x6}, 'port0\x00', 0x32, 0x2, 0x7, 0x9, 0xfffff260, 0x7, 0x2, 0x0, 0x1, 0x6bf}) r3 = dup2(r1, r1) ioctl$TCFLSH(r3, 0x540b, 0x7c7) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:58:29 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7d, 0x28000) ioctl(r1, 0x9, &(0x7f00000000c0)="0800a1e971000000000000") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r2) ptrace$getsig(0x4209, r2, 0x760004, 0x0) [ 1266.689184][T19392] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:30 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r3, &(0x7f0000000000)=""/37, 0x25) getdents(r3, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x802, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x6, 0x8000) syz_kvm_setup_cpu$x86(r8, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) r10 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r10) r11 = add_key(&(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000580)="beedc9c9c6145c69a8102094bcfa3ea51daebd86f04546fe672a8a89bec8d75f26f0fa8dd8053aa73ce2cd6a923a5a06e38f9e590a7848e533cd43abb95618e441e16ffab069d3f8954f21253025c6260d87f5705345c09f50194b79ed8460ae19318fb2ebfd946a3d36b032a1e46953744f89ed8bed51073aa8c85ed0ab3564e7a16c00460b2e43d35523bd3724f257b4bd9a5a27a521aaa5212cff2c8c847b908d7bbdfd781efe8a6605ef1eec1cdbe0ca3ffe2f2c59c3bb6dcad384ca3f633837cdab5d62d63e13d3bc6b67", 0xcd, r10) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, r11) ptrace$pokeuser(0x6, r9, 0x4, 0x100000000) 11:58:30 executing program 4: r0 = getpid() r1 = socket$can_raw(0x1d, 0x3, 0x1) read(r1, &(0x7f00000000c0)=""/32, 0xa6) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 1267.011315][T19577] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:30 executing program 5: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) sched_setattr(r2, &(0x7f0000000080)={0x30, 0x3, 0x2, 0x0, 0x3, 0xffffffffffff29c8, 0xe000, 0x3}, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r3 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) membarrier(0x8c78eccc5fa3dd53, 0x0) tkill(r0, 0x1000000000015) 11:58:30 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000a40)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={0x0, 0x20}, &(0x7f0000000ac0)=0x8) r6 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r7 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r8, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r9 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r9, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") [ 1267.215477][T19577] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:30 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = gettid() r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000080)=0x7, 0x4) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000000180)={0x2f, @multicast1, 0x4e20, 0x0, 'dh\x00', 0x93fc793d740af2ce, 0x8001, 0x69}, 0x2c) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/pid_for_children\x00') ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r5) r6 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x400, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000006607ac01c088da17ab31c1d6678cd2dedab4b65d967a746967606fd97571ce3d07d2abc22a4afa1ec06a3589d450bc1876e85fdb7cba39ffd3162a05a0559c6b210f67bb30d6c3380c8d1df4a64384b45e036fcb6a4ca04c8ef3b6d606000000b3e37719c50ba0539fc0765a5a691f7fd2b17c9114bd6e7a62895d87f1063a0ff6277e047ff9a4c06ae9ba63510bf4cb53535417c8a78db443eb051055c14e43e40b2a9a9468208e88d75f1bd7627a520dc92d4346a7f733c73ac227d657ac1191fa5fff6846a14a1a06055e02d196ceb359bcadde886cba1916a2337af35974cd8db70149d2d89f4962e546d00a0ec3be5ec795f492e62b18b495815459967197ea187f8d8c0f476da2949c012da89265bdb38fd86c33fba133c907427b52359e006f7de3d300e78859c0a2ff000000000000005330f4d3fcfdc266536b2c9f186f2286b2bb4364ff7796200f51bd45885ef89e5051dc5701e4a577d3be1327cc6f701c278afc6b869aa37c5529a7d3ceb1e17f2b43e18628f39d77d30b45808f56a1d2e62818ef81fae8fae43ed8b041f5c976a01e2a92559bee32f02cabce2e09d46d05f2d4ef83a2439b0e26", @ANYRES16=r9, @ANYBLOB="3f02000000000000000001000000000000000c4100000014001462726f6164636173742d6c696e6b0000"], 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r7, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20c}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r9, 0x66e391ba0a560392, 0x70bd29, 0x25dfdbfb, {{}, 0x0, 0x4108, 0x0, {0x14, 0x18, {0x0, @bearer=@l2={'eth', 0x3a, 'bridge0\x00'}}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) epoll_wait(r6, &(0x7f0000000000)=[{}], 0x1, 0x0) ptrace$getsig(0x4209, r5, 0x760004, 0x0) 11:58:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") bind(r0, &(0x7f0000000080)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x80) r1 = getpid() r2 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/28, 0x24d42ca6) r3 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x3, 0x2) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000680)={0x116, "3eaf8a962c53666bd715f673c497aca8b882d9f7c2a50ea3f0d0edbf5be516bcb9e8bf1736b34635b4e007140600c62c365142046b4d8c565b7b710ef9b3214912919ed239c872b3caa141b3292e0bb4cedd1b0fc2715fc74a7be674ce45ff505bf776a6843421c9466a227055177e169a6c3d4ceb3b0f694419c67ee07c81cb5ec94a8cfa768670dcaa67bbc103d5508eb4eafd4f24b4f5b64726e3736eeb169840ebdebd20fc1dda5e37e1d58734739734a9bb1f4977d3ac831c12b4ac319811e12c70585497133fe28edba64226733dfbdb8bf35e2aa38e6ca36b0329366c7fc126896404d818e0dd5695a22e041355356c3dcce30b8996b1e23421d7ed9cd3f1326f5271b22b77dc3fab4bd8c5e8737921b753bc"}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r4 = dup2(r2, r2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) socket$inet6_tcp(0xa, 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000015) 11:58:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r3, &(0x7f0000000000)=""/37, 0x25) getdents(r3, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x802, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r8, 0x4, 0x100000000) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r10, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") epoll_ctl$EPOLL_CTL_DEL(r9, 0x2, r10) 11:58:30 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880), 0x0, 0xa000) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f0000000380)={0x0, 0x0, 0x8000, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f0000000280)={0x6, @output={0x1000, 0x1, {0x1, 0x4d1}, 0x9, 0x5}}) r4 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000200)=0x7) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000440)={0x8, 0x1ff, 0x3ff}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) r6 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$BLKIOOPT(r6, 0x1279, &(0x7f00000000c0)) 11:58:30 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r2) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$TIOCLINUX4(r3, 0x541c, &(0x7f0000000000)) ptrace$getsig(0x4209, r2, 0x760004, 0x0) 11:58:31 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) read(r0, &(0x7f00000000c0)=""/32, 0xa6) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x1000000000015) 11:58:31 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r4 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) getpeername$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, r5}, 0xc) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:58:31 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000a40)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={0x0, 0x20}, &(0x7f0000000ac0)=0x8) r6 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r7 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r8, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r9 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r9, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:58:31 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000000c0)={0x0, 0x5, 0xedd}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="500000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e000000280012000c000100697036677265000018000200140006002e9ef0a1be118746bbbf83fb842f5512"], 0x50}}, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000040)='net/udp6\x00') ioctl$SG_GET_RESERVED_SIZE(r4, 0x2272, &(0x7f0000000080)) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r5) 11:58:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') r4 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) getdents64(r4, &(0x7f00000000c0)=""/49, 0x31) getdents(r3, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0xa, 0x802, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r9, 0x4, 0x100000000) 11:58:31 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0}, &(0x7f0000000a40)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="5c0000007d020000005500f9ff1f000000200100000005000000000000000000a8440000000004000000810000000000000013002c2d76626f786e6574315829766d6e6574312900000500706b6373310a002f6465762f7662692300378157bc95bf615c9a57972cb29214f390a5bedcd489525528e46f545da3015df5c38d9558807b913977619d01bbf9d32b88e6a5c65b3942a1e197b3ce36e757413da13ff2f7cbb9949d5ca8f88c9c7b667033359aa682b56dc43212eeb8b6a64916c0c964efe379fd2624758e331b26e60ace63ce74edf854c2dfb72fe02248be6541ddd0f76b847224d4d74a8a72c06317959044251f53abe327f11939fa8c8234037b6106df5753d1cc7203e1e4bdbee80466165554c43c11056a607a63f8a17d5630e6ea719124494d"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:58:31 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x125103, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x5a, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 11:58:31 executing program 5: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(0x0, r5, r5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(0x0, r8, r8) r9 = socket$kcm(0x29, 0x5, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) setgid(r10) r11 = socket$kcm(0x29, 0x5, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) setgid(r12) r13 = getegid() r14 = socket$kcm(0x29, 0x5, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) setgid(r15) r16 = socket$kcm(0x29, 0x5, 0x0) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) setgid(r17) r18 = socket$kcm(0x29, 0x5, 0x0) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) setgid(r19) getgroups(0x6, &(0x7f0000000280)=[0x0, r17, 0xee01, 0xee01, r19, 0xee01]) fsetxattr$system_posix_acl(r2, &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {0x1, 0x1}, [{0x2, 0x5, r5}, {0x2, 0x1, r8}], {0x4, 0x4}, [{0x8, 0x7, r10}, {0x8, 0x2}, {0x8, 0x2, r12}, {0x8, 0x1, r13}, {0x8, 0x4, r15}, {0x8, 0x0, r20}], {0x10, 0x6}, {0x20, 0xd5e44a4cfc82fd8e}}, 0x64, 0x2) r21 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r21, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) getsockopt$bt_BT_SECURITY(r21, 0x112, 0x4, &(0x7f0000000080), 0x2) tkill(r0, 0x1000000000015) r22 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r22, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$BLKDISCARD(r22, 0x1277, &(0x7f00000000c0)=0x4) 11:58:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendfile(r2, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r3 = socket$inet(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r4, &(0x7f0000000000)=""/37, 0x25) getdents(r4, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0xa, 0x802, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r9, 0x4, 0x100000000) [ 1269.063936][ C0] net_ratelimit: 18 callbacks suppressed [ 1269.063959][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1269.076241][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:58:32 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) read(r0, &(0x7f00000000c0)=""/32, 0xa6) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x1000000000015) 11:58:32 executing program 2: getpid() r0 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) [ 1269.214447][T20009] validate_nla: 3 callbacks suppressed [ 1269.214470][T20009] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:32 executing program 3: 11:58:32 executing program 3: 11:58:32 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0}, &(0x7f0000000a40)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:58:32 executing program 3: 11:58:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r3, &(0x7f0000000000)=""/37, 0x25) getdents(r3, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x802, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000400)={[0x3, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce, 0x1000, 0x0, 0x0, 0x0, 0x3, 0x898]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r8, 0x4, 0x100000000) 11:58:32 executing program 5: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x40, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x2, 'queue1\x00', 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000380)) fchdir(r2) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x4, @thr={0x0, 0x0}}, &(0x7f00000001c0)=0x0) timer_settime(r4, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:58:32 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) [ 1269.897497][T20079] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:33 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) read(r0, &(0x7f00000000c0)=""/32, 0xa6) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x1000000000015) [ 1270.262940][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1270.269249][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1270.275825][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1270.282105][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1270.288758][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1270.295150][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1270.327727][T20094] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:33 executing program 4: r0 = getpid() socket$can_raw(0x1d, 0x3, 0x1) read(0xffffffffffffffff, &(0x7f00000000c0)=""/32, 0xa6) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:58:33 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000000c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f0000000080)) tkill(r0, 0x1000000000015) 11:58:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe7bd, 0x1}}, 0x0, 0xd, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f00000000c0)) getdents64(r3, &(0x7f0000000000)=""/37, 0x25) getdents(r3, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x802, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000280)="515ce7040033049a27da5fb5fb66489e5865de18dae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0xc578de78) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r8, 0x4, 0x100000000) [ 1270.755343][T20106] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:33 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0}, &(0x7f0000000a40)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:58:33 executing program 4: r0 = getpid() socket$can_raw(0x1d, 0x3, 0x1) read(0xffffffffffffffff, &(0x7f00000000c0)=""/32, 0xa6) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 1270.947390][T20139] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1271.063940][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1271.070216][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:58:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r2, r3, 0x0, 0xffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000040)=r6, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000001c0)={r6, 0x2, 0x90}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0)={0x8, 0x8204, 0x6, 0x3ff, r6}, 0xdf) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r7 = socket$inet(0x10, 0x3, 0xc) sendmsg(r7, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r7], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r8, &(0x7f0000000000)=""/37, 0x25) getdents(r8, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket(0xa, 0x802, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r12, 0xae80, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r13, 0x4, 0x100000000) 11:58:34 executing program 4: r0 = getpid() socket$can_raw(0x1d, 0x3, 0x1) read(0xffffffffffffffff, &(0x7f00000000c0)=""/32, 0xa6) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 1271.336198][T20176] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1271.421101][T20176] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:34 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000280)='environ\x00') getdents64(r4, &(0x7f0000000000)=""/37, 0x25) getdents(r4, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0xa, 0x802, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r9, 0x4, 0x100000000) 11:58:34 executing program 4: r0 = getpid() r1 = socket$can_raw(0x1d, 0x3, 0x1) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 1271.608655][T20201] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:36 executing program 5: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f0000000580)={0x0, 0x10000, 0x0, 'queue1\x00', 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:58:36 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000002c0)={r4}) read(r4, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r5 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r5, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r6 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x10001, 0x129000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r10 = eventfd(0x0) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f00000002c0)={r9}) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000080)={r10}) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000000)={r10}) r11 = dup3(r10, r6, 0x180000) ioctl$TIOCLINUX3(r11, 0x541c, &(0x7f0000000140)) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f00000000c0)=r5) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:58:36 executing program 4: r0 = getpid() r1 = socket$can_raw(0x1d, 0x3, 0x1) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:58:36 executing program 3: r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0x0, r1) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)) 11:58:36 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x37, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68"}, &(0x7f0000000a40)=0x3f) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:58:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7d8bf5cbda0fde04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2}, 0x1100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') listen(r1, 0x2) getdents64(r3, &(0x7f0000000000)=""/37, 0x25) getdents(r3, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x802, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$char_usb(r6, &(0x7f0000000780)="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", 0x1ad) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x2, 0x4ce]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r9, 0x4, 0x100000000) [ 1273.106350][T20239] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:36 executing program 4: r0 = getpid() r1 = socket$can_raw(0x1d, 0x3, 0x1) read(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 1273.255091][T20341] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:36 executing program 3: unshare(0x20600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x1ff) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) 11:58:36 executing program 4: r0 = getpid() r1 = socket$can_raw(0x1d, 0x3, 0x1) read(r1, &(0x7f00000000c0)=""/32, 0xa6) timer_create(0x0, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:58:36 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x22, 0x200000000}, 0x4400, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r2 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r3 = syz_open_procfs(0x0, 0x0) sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc) r4 = socket$inet(0x10, 0x3, 0xc) sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r4], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r3, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r5, &(0x7f0000000000)=""/37, 0x25) getdents(r5, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0xa, 0x802, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r10, 0x4, 0x100000000) 11:58:36 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r1 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r2 = syz_open_procfs(0x0, 0x0) sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc) r3 = socket$inet(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r4, &(0x7f0000000000)=""/37, 0x25) getdents(r4, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0xa, 0x802, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) ptrace$pokeuser(0x6, r9, 0x4, 0x100000000) 11:58:36 executing program 3: 11:58:37 executing program 3: 11:58:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r0 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40fdf) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x1000) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000580)={0xa0, 0x7, 0x0, [{0xfffffffffffffc01, 0x7, 0x6, 0x3f, 0x1, 0x3, 0x9}, {0x7, 0x3, 0x60, 0x20, 0x4b, 0x7f, 0xff}, {0xd4, 0x60000000000, 0x4, 0xe, 0x8, 0x5, 0x28}, {0x1, 0x4, 0x8, 0x81, 0x4, 0x4, 0x3}, {0x6, 0x3ff, 0x7, 0x4, 0x1, 0x9, 0x7}, {0x0, 0x4, 0x1, 0x33, 0x0, 0x9, 0x45}, {0x9, 0xfffffffffffff000, 0x200, 0x1, 0x2, 0x3c, 0x8}]}) socket$inet(0x10, 0x3, 0xc) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r3, &(0x7f0000000000)=""/37, 0x25) getdents(r3, &(0x7f0000000040)=""/123, 0x7b) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x802, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23b3bda059d3533f74da28", 0x29) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r8, 0x4, 0x100000000) 11:58:37 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x37, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68"}, &(0x7f0000000a40)=0x3f) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:58:37 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r4, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x1, 0x2, 0x1f, 0x5, r4}) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000080)={'vlan0\x00', {0x2, 0x4e24, @remote}}) tkill(r0, 0x1000000000015) 11:58:37 executing program 5: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f00000002c0)=""/57, 0x21) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f00000000c0)={0x0, 0x3, 0x76, &(0x7f0000000080)=0x3ff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) prctl$PR_GET_CHILD_SUBREAPER(0x25) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:58:37 executing program 3: 11:58:37 executing program 3: 11:58:37 executing program 3: [ 1274.314663][T20490] validate_nla: 5 callbacks suppressed [ 1274.314687][T20490] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1274.422673][ C1] net_ratelimit: 12 callbacks suppressed [ 1274.422693][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1274.434736][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1274.441005][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1274.447282][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1274.453592][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1274.459794][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1275.222848][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1275.229191][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1275.302754][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1275.308765][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:58:39 executing program 4: r0 = getpid() r1 = socket$can_raw(0x1d, 0x3, 0x1) read(r1, &(0x7f00000000c0)=""/32, 0xa6) timer_create(0x0, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:58:39 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = eventfd(0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000002c0)={r4}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000080)={r5}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r5}) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x105680, 0x0) r7 = dup2(r1, r6) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r7, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r8 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) setns(r8, 0x20000) tkill(r0, 0x1000000000015) 11:58:39 executing program 3: 11:58:39 executing program 0: 11:58:39 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x37, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68"}, &(0x7f0000000a40)=0x3f) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:58:39 executing program 5: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x5, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:58:39 executing program 0: 11:58:39 executing program 3: 11:58:39 executing program 0: 11:58:39 executing program 3: 11:58:39 executing program 0: 11:58:39 executing program 3: 11:58:42 executing program 4: r0 = getpid() r1 = socket$can_raw(0x1d, 0x3, 0x1) read(r1, &(0x7f00000000c0)=""/32, 0xa6) timer_create(0x0, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:58:42 executing program 0: 11:58:42 executing program 3: 11:58:42 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x53, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a8766967819"}, &(0x7f0000000a40)=0x5b) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:58:42 executing program 5: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000200)={0x4, &(0x7f0000000140)=[{}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000280)={r3}) 11:58:42 executing program 2: getpid() r0 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) socket$bt_bnep(0x1f, 0x3, 0x4) r1 = dup2(r0, r0) r2 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$FUSE_GETXATTR(r2, &(0x7f0000000140)={0x18, 0xfffffffffffffff5, 0x2, {0xff}}, 0x18) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)=0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x1, 0x4}, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r3, 0x1, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, &(0x7f00000000c0)) [ 1279.462751][ C0] net_ratelimit: 18 callbacks suppressed [ 1279.462773][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1279.474711][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:58:42 executing program 3: 11:58:42 executing program 0: 11:58:42 executing program 3: 11:58:42 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) 11:58:42 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x125f, 0x0) 11:58:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) sendto$inet(r1, &(0x7f00000001c0)=';', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) sendto$inet(r0, &(0x7f00000001c0)=';', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000001c0)=';', 0x1, 0x0, 0x0, 0x0) [ 1280.662724][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1280.668734][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1280.674877][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1280.680829][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1280.686917][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1280.692915][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1281.462762][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1281.468861][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:58:45 executing program 4: r0 = getpid() r1 = socket$can_raw(0x1d, 0x3, 0x1) read(r1, &(0x7f00000000c0)=""/32, 0xa6) timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:58:45 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="6653070000053c07bc3376003639405cb4aed12f00", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) 11:58:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="0f01d866b9800000c00f326635000100000f30ded90ff49500300fc7b671070f20d86635080000000f22d8ba6100ec0f001f633ff30f09", 0x37}], 0x1, 0x5a, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x7}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:58:45 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x53, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a8766967819"}, &(0x7f0000000a40)=0x5b) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:58:45 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @tid=r0}, &(0x7f00000001c0)) r5 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$SG_GET_PACK_ID(r5, 0x227c, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:58:45 executing program 5: r0 = getpid() r1 = socket$inet(0x2, 0x80b, 0x3f) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000280)={{0x6, @multicast2, 0x4e24, 0x1, 'fo\x00', 0x0, 0x5, 0x4f}, {@loopback, 0x4e20, 0x0, 0x5, 0xc1, 0x8}}, 0x44) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000580)={'raw\x00', 0xef, "d23ee2bfdab00651f2c732e9c9b70f019efd4266e235bbe6e18d0a5407bec580ad2b4dc1f1a56e5ac4de4d56bbe8b27cd82a8292c54628a80f416e18db8b50c9deb8d3066fd2bd9e35675c391c86a79a09eac3fa91bee3fddecbf949c1600670495d7bf9bf40e65b31ea54272eeba8766219e7c671881cd262e38588a8d648c5b410bbe3abe843ed07f4117113b1b034c983c5ee664224d4f7097a529202c67ec202f02b1ce993bd0e1a1605622dec1f4ab26ebf5b3d453fd24f483471dc3110e0d1b69cc600dfd72dadeee0869cc4640bac082921ff9a96716fc94a6ad130bf50f3f762e977350cf232ba459db815"}, &(0x7f0000000080)=0x113) r2 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r3 = dup2(r2, r2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:58:45 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0xba8e71d0dcf76730, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ifb0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff02c}, {0x16}]}) [ 1282.730164][T20568] kvm: SMP vm created on host with unstable TSC; guest TSC will not be reliable 11:58:45 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x54500, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000280)={0x2, 0x1, 'client1\x00', 0xffffffff8000000a, "7a25e8c67625dc7f", "eca9eaae2127d842cbc9af319c2a2d51fc7a48e7b170010f17f36e973fc93918", 0x4, 0x6}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3, @time={r3, r4+10000000}, 0x0, {}, 0x4}) r5 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r5, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x2000) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000200)=0x3) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcs\x00', 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r7, 0x29, 0xd3, &(0x7f0000000380)={{0xa, 0x4e24, 0x4, @remote, 0x20}, {0xa, 0x4e24, 0xffffffff, @mcast2, 0x200}, 0x3f, [0x967, 0x20, 0x16, 0x9, 0x57, 0x0, 0x1ff, 0x1000]}, 0x5c) 11:58:46 executing program 3: r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002740)=ANY=[@ANYBLOB="2400000019000101000000000000000002180000ff03fd000000000008000100ac141400"], 0x24}}, 0x0) sendmmsg$alg(r0, &(0x7f00000015c0)=[{0x6, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)}], 0x1, 0x0) 11:58:46 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$unix(0x1, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)={'team0\x00', r3}) r4 = socket$unix(0x1, 0x10000000000002, 0x0) bind$unix(r4, &(0x7f0000003000)=@abs={0x1}, 0x8) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000002d, 0x2002, 0x0) dup3(r1, r4, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x0, "0000010000001a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) write$binfmt_script(r1, 0x0, 0x0) 11:58:46 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x53, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a8766967819"}, &(0x7f0000000a40)=0x5b) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:58:46 executing program 3: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) flistxattr(r0, &(0x7f0000001480)=""/4096, 0x10a5) r1 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000000)=""/15) [ 1284.822793][ C1] net_ratelimit: 12 callbacks suppressed [ 1284.822815][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1284.834901][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1284.841190][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1284.847382][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1284.853730][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1284.859856][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:58:48 executing program 4: r0 = getpid() r1 = socket$can_raw(0x1d, 0x3, 0x1) read(r1, &(0x7f00000000c0)=""/32, 0xa6) timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:58:48 executing program 2: getpid() r0 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x24d42ca6) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x5, 0x2, 0x2, 0x4, 0x0, 0xe09, 0x0, 0x6, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8001, 0x5, @perf_bp={&(0x7f0000000080), 0xf}, 0x8, 0x3e2, 0x8, 0xa, 0x6, 0x3, 0x5}, r1, 0x6, r2, 0x6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r3 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r7 = eventfd(0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f00000002c0)={r6}) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000080)={r7}) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000000)={r7}) ioctl$FS_IOC_ENABLE_VERITY(r7, 0x40806685, &(0x7f0000000580)={0x1, 0x4b3c9ad29736b447, 0x1000, 0x9e, &(0x7f0000000340)="c61e908b03c3827776a2ab57d7e15fa17523c57cc9ca1fc2d57a486f2b66aaa3c4adb30ae014c446af2ebf68cfdb9d070203ceb0d066f7e8f6d55d9290f070feaec7292a5455f384206cecd07f94a344487e6c5bdf261f604c0d65d5de042812785cefb3426279433f5e98287b08c6790badeee53f6245ed58d28b84a8f04863c71186441faf8c05a5ce7b14d4c03a020e818718e0b0776833bd8247179c", 0xb8, 0x0, &(0x7f0000000400)="d8a0f140b8ece53213bb1435df8dbe1f4909c608f22a495f1b5eb18c8e3a89597111667e8f544ca90cba2b25962753b1546f3016cee93619df3137d65d0dbf7e5b71130ad965ab11cf973bbcd4c0019013795d4b3cccc49ae36f83a54f6274681ce2a28003c9fd03f635fd7b461ec7d322978df942d6891c2c97e92015f22e95742d39ebee61b0a89d133a5c5d06d65c4c5ebf58f9b172ee70ee742fcd7d2e1657124dd627b84858e444a60dc667c4c8a6976674d804d425"}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 11:58:48 executing program 3: socket$inet_tcp(0x2, 0x3, 0x6) syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0xfffffffffffffeee) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, &(0x7f0000000180)={0x8, 0x20, [0xa27, 0x70, 0x1f, 0xfe0, 0x3], 0x8}) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) r1 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x84) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000110}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x74, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x5, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x0, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_SOCK={0x40, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb51}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf48}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x76}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40070}, 0xc001) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x3) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x800, 0x0) sendmsg$nl_generic(r4, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[]}}, 0x4) r5 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) recvfrom$unix(r5, &(0x7f0000000080)=""/4, 0x4, 0x10000, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 11:58:48 executing program 5: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f00000002c0)={r9}) sendfile(r6, r3, 0x0, 0x6) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r10, 0x84, 0x78, &(0x7f0000000040)=r12, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000001c0)={r12, 0x2, 0x90}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000280)={r12, 0xea, "1f85ff5eb13037c40f2b10cf84fe131577e686ff755868155b887e4754fbb3558f5f3bf4523989d75547897ad0c2b486c94adb5b98acb0d20e939f45cf5fc68fce99dc229d408f71484be82065cda2317abc012fc36cbee01c229883c1eaed2674bb1fdea05f0a8e54e7990909d8d7d295bd087fae543973cbba52304c25be58a4173a5678379cdb119cecbf1bca0b07555f0170daa7a26e66cbb842151d83fb47c208898f44ae6fed262ad74e937936bb4c80eba8fc0bb3b8b9b15aa53222799e6db96099874a39c5844445b35de356ae3b4dd16f0269203b657f7d03953ee6a9493042e34e2cb13fc8"}, &(0x7f0000000080)=0xf2) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000000c0)={0x1, 0x10013, 0x3, 0x2, r13}, 0x10) tkill(r0, 0x1000000000015) 11:58:48 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x61, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2"}, &(0x7f0000000a40)=0x69) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:58:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x8) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000080)=0x8) r1 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0) bind$inet(r2, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2}, 0x10) listen(r2, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1ab802, 0x0) readv(r4, &(0x7f0000000880)=[{&(0x7f0000000080)=""/8, 0x8}], 0x1) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f0000000300)={r5, 0x3}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f00000000c0)={r5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001000010800004d7a0500000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000400140008001b000000d4301ae0587f8ea4e46d548cbe7cc508"], 0x2c}}, 0x0) [ 1285.623094][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1285.629227][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1285.703086][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1285.709466][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:58:48 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xc}, [@ldst={0x6, 0x1, 0x3, 0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) socket$nl_netfilter(0x10, 0x3, 0xc) 11:58:49 executing program 3: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) listen(r0, 0x3) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) 11:58:49 executing program 0: openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f00000001c0)=""/7, 0x7) stat(&(0x7f0000000980)='./file0/file0\x00', &(0x7f0000000900)) getegid() syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) syz_open_dev$mouse(0x0, 0x0, 0x8000) r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0884123, &(0x7f0000000340)="16") r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000002c0)={r4}) fcntl$getownex(r1, 0x10, &(0x7f0000000280)={0x0, 0x0}) fcntl$setownex(r4, 0xf, &(0x7f0000000440)={0x244c49943a11eec6, r5}) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f00000000c0)=0x0) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000140)=r6) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000009c0)=""/4096) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0x1, 0x3e3) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r7, 0xc0106401, &(0x7f0000000080)={0xfffffffffffffe76, &(0x7f0000000380)=""/168}) r8 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000300)='pids.max\x00', 0x2, 0x0) fcntl$addseals(r9, 0x409, 0x456be7d51241ba83) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8242, 0x2, 0x5, 0x0, 0x5, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x10) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000200)={0x0, "499280584a4963c48a7ce2971b50abb9003f84af49fd2c68872c4e642786a706", 0x0, 0x5, 0x2, 0x40000, 0x0, 0x4}) unshare(0x60020000) [ 1286.094900][T21178] IPVS: ftp: loaded support on port[0] = 21 11:58:49 executing program 5: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000380)={0x0, 0x0, 0x7ff}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 1286.292783][T21248] IPVS: ftp: loaded support on port[0] = 21 11:58:49 executing program 3: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f00000002c0)={r9}) sendfile(r6, r3, 0x0, 0x6) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r10, 0x84, 0x78, &(0x7f0000000040)=r12, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000001c0)={r12, 0x2, 0x90}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000280)={r12, 0xea, "1f85ff5eb13037c40f2b10cf84fe131577e686ff755868155b887e4754fbb3558f5f3bf4523989d75547897ad0c2b486c94adb5b98acb0d20e939f45cf5fc68fce99dc229d408f71484be82065cda2317abc012fc36cbee01c229883c1eaed2674bb1fdea05f0a8e54e7990909d8d7d295bd087fae543973cbba52304c25be58a4173a5678379cdb119cecbf1bca0b07555f0170daa7a26e66cbb842151d83fb47c208898f44ae6fed262ad74e937936bb4c80eba8fc0bb3b8b9b15aa53222799e6db96099874a39c5844445b35de356ae3b4dd16f0269203b657f7d03953ee6a9493042e34e2cb13fc8"}, &(0x7f0000000080)=0xf2) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000000c0)={0x1, 0x10013, 0x3, 0x2, r13}, 0x10) tkill(r0, 0x1000000000015) 11:58:49 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000900)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x24) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000000)={@initdev, @dev, @empty}, &(0x7f0000000040)=0xc) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="e187a48d30b3aaaaaaaaaa00080045f6ff3b0000000000119078ac14ffbbe000000100004e21002890780100000002000000000000000200000000000000010000000200000040000000"], 0x0) 11:58:49 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x61, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2"}, &(0x7f0000000a40)=0x69) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="5c0000007d020000005500f9ff1f000000200100000005000000000000000000a8440000000004000000810000000000000013002c2d76626f786e6574315829766d6e6574312900000500706b6373310a002f6465762f7662692300378157bc95bf615c9a57972cb29214f390a5bedcd489525528e46f545da3015df5c38d9558807b913977619d01bbf9d32b88e6a5c65b3942a1e197b3ce36e757413da13ff2f7cbb9949d5ca8f88c9c7b667033359aa682b56dc43212eeb8b6a64916c0c964efe379fd2624758e331b26e60ace63ce74edf854c2dfb72fe02248be6541ddd0f76b847224d4d74a8a72c06317959044251f53abe327f11939fa8c8234037b6106df5753d1cc7203e1e4bdbee80466165554c43c11056a607a63f8a17d5630e6ea719124494d"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:58:51 executing program 4: r0 = getpid() r1 = socket$can_raw(0x1d, 0x3, 0x1) read(r1, &(0x7f00000000c0)=""/32, 0xa6) timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:58:51 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="8500fbdd721f5a00bd0000000000000066000000000000009500000000000000"], &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) 11:58:51 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000080)={0xd, 0x1}) r1 = socket$inet(0x2, 0x803, 0x85) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000040)=0x8, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000514ff0), 0x10) 11:58:51 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) tkill(r2, 0x40) r3 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:58:51 executing program 5: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='\'dev/+\r\xc5\xef\x9b\xc0\x05\x00', 0x0, 0xedeb283ed900425b) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) socket$pptp(0x18, 0x1, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r3, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:58:51 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x61, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2"}, &(0x7f0000000a40)=0x69) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:58:52 executing program 0: getpid() r0 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x24d42ca6) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x5, 0x2, 0x2, 0x4, 0x0, 0xe09, 0x0, 0x6, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8001, 0x5, @perf_bp={&(0x7f0000000080), 0xf}, 0x8, 0x3e2, 0x8, 0xa, 0x6, 0x3, 0x5}, r1, 0x6, r2, 0x6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r3 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r7 = eventfd(0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f00000002c0)={r6}) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000080)={r7}) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000000)={r7}) ioctl$FS_IOC_ENABLE_VERITY(r7, 0x40806685, &(0x7f0000000580)={0x1, 0x4b3c9ad29736b447, 0x1000, 0x9e, &(0x7f0000000340)="c61e908b03c3827776a2ab57d7e15fa17523c57cc9ca1fc2d57a486f2b66aaa3c4adb30ae014c446af2ebf68cfdb9d070203ceb0d066f7e8f6d55d9290f070feaec7292a5455f384206cecd07f94a344487e6c5bdf261f604c0d65d5de042812785cefb3426279433f5e98287b08c6790badeee53f6245ed58d28b84a8f04863c71186441faf8c05a5ce7b14d4c03a020e818718e0b0776833bd8247179c", 0xb8, 0x0, &(0x7f0000000400)="d8a0f140b8ece53213bb1435df8dbe1f4909c608f22a495f1b5eb18c8e3a89597111667e8f544ca90cba2b25962753b1546f3016cee93619df3137d65d0dbf7e5b71130ad965ab11cf973bbcd4c0019013795d4b3cccc49ae36f83a54f6274681ce2a28003c9fd03f635fd7b461ec7d322978df942d6891c2c97e92015f22e95742d39ebee61b0a89d133a5c5d06d65c4c5ebf58f9b172ee70ee742fcd7d2e1657124dd627b84858e444a60dc667c4c8a6976674d804d425"}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 11:58:52 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) sched_yield() ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x1, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x200, 0x0) getpeername$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:58:52 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x7f, @remote, 0x59}, 0x1c) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="b56d08000000000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000600ac1414bb08000600ac1414aa080006000a1415bb08000700ac1414aa080007000000000008000700ac1e010108000a0001000000080003001800020003000000080011004e24000008000600ac1e000100e4ca15e4c1b4defe4ee63386ba6dbe7d8c06a0c141d534889ac012510fcc533a68ee57c9c647f77b7e99575c91dc242e682bca183ea3b5d016a763a73348817e8d67663dc92e4362cd6f59ec0f3d9d636d7d7df789dfb541bda4ddd0837b4146bdadeb1a2d8bf689053ec0ee1950619d55502562c920fb20a2b81aaa485616f19f6782f358d205913cf3ed9afda01943841d6fda2cd320595b781c672062e2047158d54ed00c030acc9e27f0bc9e142800cd91ba7fdad3994b8ce213355fa195fd005deb1fb04e3d2f09375b2ba23ae1750df5622b0900000000"], 0x5}, 0x1, 0x0, 0x0, 0x4000120}, 0x800) 11:58:52 executing program 3: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xffffffd4, 0x4cf0f, 0x0, 0x10}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0xc3, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffdca, 0x10, &(0x7f0000000000)={0x2, 0x3}, 0x10}, 0x70) r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x5, 0x8008, 0x2, 0x3ff, 0x2, 0x4, 0x0, 0x0}, &(0x7f0000000400)=0x20) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000440)=r2, 0x4) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x60206001}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r3, @ANYBLOB="10062cbd7000fbdbdf25080000001c000200080003000400000008000e004e240000080003000400000008000400b7c769016c00030008000500000000000800010001000000080001000000000014000600fe8800000000000000000000000001010800010000000000080007004e2300000800010000000000080001000200000008000300030008001400020074756e6c30000000000000000000003408000600fd070000080004000080000008000500090000001c0002000800030004000000080007000001000008000800020000000800040002000000"], 0xe0}, 0x1, 0x0, 0x0, 0x4000090}, 0x4046840) 11:58:52 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x68, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae"}, &(0x7f0000000a40)=0x70) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:58:52 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x6c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r0}, [@IFLA_LINKINFO={0x4c, 0x12, @ipip={{0xc, 0x1, 'ipip\x00'}, {0x3c, 0x2, [@tunl_policy=[@IFLA_IPTUN_TOS={0x371, 0x5, 0x1}, @IFLA_IPTUN_ENCAP_DPORT={0x0, 0x12, 0x4e24}, @IFLA_IPTUN_LINK={0x8, 0x2, r0}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1e}, @IFLA_IPTUN_TTL={0x8, 0x4, 0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x8, 0xf, 0x2}], @IFLA_IPTUN_PROTO={0x8}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 1289.863190][ C0] net_ratelimit: 18 callbacks suppressed [ 1289.863212][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1289.875310][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1291.062797][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1291.068958][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1291.075329][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1291.081470][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1291.087854][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1291.094071][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:58:54 executing program 4: r0 = getpid() r1 = socket$can_raw(0x1d, 0x3, 0x1) read(r1, &(0x7f00000000c0)=""/32, 0xa6) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:58:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x1a0903, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x8002}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_map={0x1ff}}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000180)=""/93, 0x5d}], 0x1, 0x0) 11:58:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) chmod(&(0x7f0000000300)='./file0\x00', 0x4) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x70d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MODE={0x8, 0x1, 0x1}]}}}]}, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r6, 0x23f, 0x0, 0x0, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1020010}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x800, 0x70bd28, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x800) r7 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 11:58:54 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000001f3, @tick, 0x0, {0xfe}}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 1291.862859][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1291.869067][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:58:55 executing program 5: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3, @tick=0x7, 0x8, {0x1, 0x4}, 0x0, 0x3, 0x1}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:58:55 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x68, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae"}, &(0x7f0000000a40)=0x70) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") [ 1291.954155][T21711] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1292.034945][T21711] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:55 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb904021d65ef0b007c06e87c55a1bc000900b8000699030000000500150004008178a80016000f000100e558f03003ac000000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace800000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300"/216, 0xd8}], 0x1}, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080)={0xcf8d}, 0x4) [ 1292.157261][T21753] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1292.170386][T21753] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:58:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000080)="f4b94c0600000f32440f20c03503000000440f22c066ba4100b0fcee450f5b40082626440f791a676fc4017c52b4c90f07b18041f4c44141dc20"}], 0x1, 0x0, 0x0, 0x3b4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:58:55 executing program 3: syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="1a9b1e1d915a", @local, [{[{0x9100, 0x1, 0x0, 0x4}], {0x8100, 0x5, 0x1, 0x1}}], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @broadcast, @broadcast, @remote, @remote}}}}, 0x0) 11:58:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x891a, &(0x7f0000000000)={'syzkaller0\x00', @ifru_settings={0x5, 0x4, @fr_pvc=&(0x7f0000000080)={0x8}}}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") clone(0xa0980000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 11:58:55 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video2\x00', 0x2, 0x0) ioctl(r2, 0x90f9, &(0x7f00000001c0)="11dca50d5e0bcfe47bf070") r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") setsockopt$SO_TIMESTAMP(r3, 0x1, 0x0, &(0x7f0000000100)=0x3, 0x4) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="b011000091b019c61ec736af64c932e13108dc8dafac7f5e4dc502e9929621689adf7e2b70787b34919752b885c290a18c51a6253c59855c9f012a62c71eb28a13f6f5a79298fd866500"/95], 0x4) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000240)={'filter\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x10\x00'}, &(0x7f0000000180)=0xfffffcb2) [ 1292.745278][T21849] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 1292.774056][T21849] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 11:58:55 executing program 0: futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x16) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000000)=0x80000001, 0x4) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 11:58:58 executing program 4: r0 = getpid() r1 = socket$can_raw(0x1d, 0x3, 0x1) read(r1, &(0x7f00000000c0)=""/32, 0xa6) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:58:58 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000080)={{0x80, 0x2, 0x3f, 0x1f, 0x4, 0x2}, 0x4}) r1 = getpid() r2 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r3 = dup2(r2, r2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000015) 11:58:58 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x68, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae"}, &(0x7f0000000a40)=0x70) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:58:58 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000340)={0x14, 0x88, 0xfa00, {r2, 0x0, 0x0, @ib={0x1b, 0x7ff, 0x5, {"417d2d86057161d64cd2c102d32b5bfb"}, 0x3, 0x3, 0x2}}}, 0x90) r3 = getpid() r4 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r4, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r5 = dup2(r4, r4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r5, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r6 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0x5, &(0x7f00000000c0)=0x9, 0x4) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r8 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x4, 0x200) ioctl$FS_IOC_FSGETXATTR(r8, 0x801c581f, &(0x7f0000000280)={0x4, 0xcc7, 0x3ff, 0x6, 0xfffffffc}) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f00000002c0)={0x4, 0x8603, 0x4, 0x6}, 0x10) ioctl$VHOST_SET_VRING_BASE(r6, 0x4008af12, &(0x7f0000000080)={0x3, 0x4}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x1000000000015) 11:58:58 executing program 3: sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000822}, 0xffffffffffffff2a, 0x0}, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000000)={{0x1, @name="add6c02029ec7057d2115c5b538d7b6c8bd722300d4f04d3c9a9ccc40b65b9e8"}, 0x8, 0x6, 0xaca}) r1 = getpid() process_vm_readv(r1, &(0x7f0000000040)=[{&(0x7f00000019c0)=""/4109, 0x100d}, {&(0x7f0000002a00)=""/102400, 0x19000}], 0x2, &(0x7f00000002c0), 0x0, 0x0) [ 1295.222743][ C1] net_ratelimit: 12 callbacks suppressed [ 1295.222830][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1295.234873][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1295.241162][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1295.247373][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1295.253697][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1295.259815][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:58:58 executing program 3: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000002880)=[{&(0x7f0000000280)="15", 0x1}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\vO\x17\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0) 11:58:58 executing program 3: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x26, &(0x7f0000000040)={0x1}) r1 = inotify_init1(0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000080)) fcntl$getownex(r1, 0x24, &(0x7f000045fff8)={0x0, 0x0}) r4 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) openat$userio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/userio\x00', 0x200, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r6, 0xc0a85320, &(0x7f0000000200)={{0x8, 0x1}, 'port0\x00', 0x2, 0x1000, 0x28, 0x7fff, 0x7fffffff, 0x800, 0xfe000, 0x0, 0x3, 0x9}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") kcmp(r3, r5, 0x0, r0, r7) ioctl$VIDIOC_G_INPUT(r4, 0x80045626, &(0x7f00000000c0)) 11:58:59 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6b, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae563778"}, &(0x7f0000000a40)=0x73) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:58:59 executing program 2: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x60) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video0\x00', 0x2, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000200)=0x1) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r2 = getpid() r3 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r4 = dup2(r3, r3) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x80040, 0x0) ioctl(r5, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r6 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x9, 0x10000) dup2(r5, r6) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") setsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f00000000c0), 0x10) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000015) [ 1296.023134][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1296.029461][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:58:59 executing program 5: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r3) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000080)='logon\x00', &(0x7f00000000c0)='ppp0_securityvboxnet1$\'!(]wlan1\x00') ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 1296.102878][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1296.109168][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:58:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00', @ifru_flags}) r0 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f00000002c0)="1975b7", 0x3, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x218, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = socket$bt_hidp(0x1f, 0x3, 0x6) bind(r2, &(0x7f0000000340)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r3) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r3) r4 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r4) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000004c0)="182187104641c1ae860bcc0820b25adc3101774b36c6b3e1e5ca45f5b111a398fea47392d95dbb4200c32299267cddf5d9ea7caf087499f9c9cf744277b5841e6b6419fb4a30cf5d19df116499560f0c9dd1c34dcef23dd529973bdd143b14606b6b3ba8b737d1d41aee28efde772c5dc0d9a9b818353e5fe14769acba5f6941e8afd53f65a16925409bba3469a7e2bbf5ff1a64aed2d7659bdeb5c0d19a99c843a7cb29492acdb7b9f0", 0xfffffffffffffe77, r4) r5 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r6, r7, 0x0, 0xffff) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r8, 0x84, 0x78, &(0x7f0000000040)=r10, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000001c0)={r10, 0x2, 0x90}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r10, 0x1, 0x29}, 0xc) 11:58:59 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000f3ff95000000000000001739f486a0ef063f58e57c4f3c167972fc5489a4ef75c6020d447d9d0070d52bafd9c4365dde7f3bbfcb8129e6ef0ba516fff002e9e67ef97a9029fd336949c2aba9c74e66b880084c49dc9d0654d67f0094d26a9eacb2ae39233f0494a84bee05438afb2c0c710cdaee6d1639c8a46f7f20161953d412002048bf8f117b054e35b281d6ddd903fe1269826be4707a0fa7fba3083406d3746b10dd8184a31d0000000000d8a33a30b918adcda5285ecb46db02b34f2606688b02d988e4"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r1 = socket$kcm(0x29, 0x1000000000002, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000280)={'veth0_to_bridge\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f000031aff8)={r1, r0}) 11:59:01 executing program 4: r0 = getpid() r1 = socket$can_raw(0x1d, 0x3, 0x1) read(r1, &(0x7f00000000c0)=""/32, 0xa6) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:59:01 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6b, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae563778"}, &(0x7f0000000a40)=0x73) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:59:01 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000000080)) tkill(r0, 0x1000000000015) 11:59:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000000)={0x2, [0x0, 0x0]}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000020000d0800000000000000006ed70014000100ff01000000000000000000000000000130c7cc1d5ed1bd3d455ae33ab5e5529322b80a0fec30f241b0ab5c26b6ef4d5fe3d82084e7f9e69091ccef91e5a276a47af8cb12f67ab38824125817a6968dcadc4237d10d7f07fb2169cc50c59d0f5c56bd52ea9c6c4d94c28058f384c3c25d20f7a4d12fe00cb2062c062c29ffa42ff324ca296ebd8dec66d5729543d87411fbf565b0ad380074045d86d90a35e3e5ec54b8574afd35475be3dd8dbc8337047c0c07de1ea39207b57788a77153a801ac1fb99ed0ca463f54c4363af624c421f4cf0746fe0ef2bbff7d7099fb3aaa37056796cb0638982555a24238f0a205f023798764f47f2514098ae2168e3c7be16613a7fe6f2187db62a447d8c1732a351d572dc9e395cf86d138928db4646ad051e72cee42d72c6f4f113766bc3c7de04acd002c7efae40e225d14b8ddcdbd564d98004fe4bc8afc1dcb180a34536e20d40775f5fad70fe1bdd1a4d1cd9c07a10de2ef1fbe637263dd8490da3ee43e52d57423d8bd90bac911a07abd302b3600"/421], 0x34}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924924924926c0, 0x0) 11:59:01 executing program 5: r0 = getpid() r1 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r2, &(0x7f0000000280)={0x6a, 0x7d, 0x1, {0x0, 0x63, 0x7, 0x400, {0x71, 0x2, 0x5}, 0x1000000, 0x1000, 0xfffffffa, 0x0, 0xd, '/dev/snd/seq\x00', 0x10, 'posix_acl_access', 0x6, 'md5sum', 0xd, '/dev/snd/seq\x00'}}, 0x6a) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) syncfs(0xffffffffffffffff) read(r3, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r4 = dup2(r3, r3) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r7, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r8, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r8, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {r5, r6+10000000}}, 0x0) tkill(r0, 0x1000000000015) 11:59:01 executing program 3: socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000000)=""/61, 0x3d}], 0x1}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') preadv(r3, &(0x7f00000017c0), 0x1000000000000304, 0x4f) 11:59:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x800, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x38400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0xd0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x20, 0x32, 0x503, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x12, @TCA_ACT_KIND={0x0, 0x1, 'csum\x00'}}, {0x0, 0x20, @TCA_ACT_INDEX={0x0, 0x3, 0x9}}, {0x0, 0x6, @TCA_ACT_KIND={0x0, 0x1, 'vlan\x00'}}, {0x0, 0x1c, @TCA_ACT_KIND={0x0, 0x1, 'skbedit\x00'}}, {0x0, 0x6, @TCA_ACT_KIND={0x0, 0x1, 'ipt\x00'}}]}]}, 0x29e}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 1298.844774][T22735] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1298.854514][T22735] tc_dump_action: action bad kind 11:59:02 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6b, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae563778"}, &(0x7f0000000a40)=0x73) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:59:02 executing program 2: r0 = getpid() r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000280)={'netpci0\x00', {0x2, 0x4e21, @broadcast}}) r2 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/28, 0x24d42ca6) sched_getattr(r0, &(0x7f0000000200)={0x30}, 0x30, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) semget$private(0x0, 0x2, 0x8) r3 = dup2(r2, r2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) r4 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) getpeername$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000140)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9, r5}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:59:02 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x1d7) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r3, r4, 0x0, 0xffff) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000040)=r7, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000001c0)={r7, 0x2, 0x90}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000000)={r7, 0x1, 0x5}, 0x8) connect$inet6(r1, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 11:59:02 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x39) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x43) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2c7c579a7ae9c96d5cc9ad926a3eea1cf89515d52fc4300c0d33f21c491f50289b7a492cc0c90f234201a5c6f9b830f910b1902ed60d51ad019c73fc9065aa2c519f654874b01f87db4a2807b6a2c2532e9d54e219c9c5f95f", 0x59}], 0x1, 0x0, 0xfe}, 0xc100) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)="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", 0x257}], 0x1, 0x0, 0x24f}, 0x2008001) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001480)="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", 0x2d5}], 0x1}, 0x0) 11:59:03 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6d, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6"}, &(0x7f0000000a40)=0x75) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") [ 1300.262876][ C0] net_ratelimit: 18 callbacks suppressed [ 1300.262898][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1300.274900][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:59:04 executing program 4: r0 = getpid() r1 = socket$can_raw(0x1d, 0x3, 0x1) read(r1, &(0x7f00000000c0)=""/32, 0xa6) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x1000000000015) 11:59:04 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\b\xefu\xfeh\x8c`@\xb3|$\xfe\x0e\xf486\x81\xf4\xe4\x1b.\x95C\xb3\xe2\xc4\x9e\'\xc97\xffwG\xb5M\x8d\x8d\xd5u\xbb\x04\xae\xbd\xe4\x00\xd1\xff\x13\xf8(\xd8j\xe1/\x17H\t8\'4\x7f\xd1\xc8\x91\x97\xbaW\x11\xe7=d\xa5tuORh2\x955\xea\x98\xf1\t\xce\xecn_\x82\xcbqb\x89D\b\xd1m\x11\xf3\x93\xe0_\xa0\xd6\xffjC\xfez\x83\x1d4\\&\xe3\xad\x90\xe1\x17-\x96\xd2w\x9d\x99) @\xaf\a\xeb\xe8kPtP\xe5w4\xba\xd5\x84I\x90\x8f\xb3^\x19\'\xde\xb2\xd0', 0x0, 0xfffffffffffffea2, 0x0, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000000)={0x9, 0x3, 0x1, 0x1ff, 0x0, 0x7ff}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x20000, 0x0) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000180)=0x1, 0x4) r2 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000040)=0x8c47, 0x4) 11:59:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0xfffffffffffffe3f) r1 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, r0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20400) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x51) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000180)={0x0, r2, 0x5}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x0, 0x0) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000480)={0x3000000000000000, 0xc2bc05380442d3ec}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_NMI(r6, 0xae9a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x8000, 0x0) openat$cgroup_procs(r9, &(0x7f0000000500)='cgroup.threads\x00', 0x2, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r6, 0xae80, 0x0) 11:59:04 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) r2 = dup2(r1, r1) ptrace(0x8, r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x6, 0x1000000, 0x1, 'queue1\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x01\x80\x00', 0x3}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:59:04 executing program 5: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) clock_gettime(0x0, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3, @time={0x77359400}, 0x0, {0xfc}, 0x0, 0x2, 0x3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0xbdc2c26418c5893, &(0x7f0000000240)={{0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:59:04 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6d, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6"}, &(0x7f0000000a40)=0x75) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:59:04 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'nr0\x01\x00\x00\x00v\x98\x91bS\xb3\x81\x99\x00', 0x800000000802}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0xc28e) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000100)) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) close(r0) 11:59:04 executing program 3: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) umount2(&(0x7f0000000000)='./file0\x00', 0xc) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x191181, 0x0) ioctl$PPPIOCSMRU1(r3, 0x40047452, &(0x7f0000000280)=0x3ff) r4 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r2, r4, 0x0, 0xffff) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000040)=r7, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000001c0)={r7, 0x2, 0x90}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r7, &(0x7f00000000c0)=0x4) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x2) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000400)={r8, 0xf9, "68bbc78da7940754f1cd96f5870176fa840b657984f23d2bf976b5bb48903f32d05193a0100356ed30e31eae46a65723913bf8467a83689232a2338ef58580afeae088bc829f1b690c0874bd0f295a1ac566eb84b23a74e0126db302d76db809993e9a927a2003669e9638664ceb6d4bbf5bfc4300ac34c0b615c60f656f57cdfb93bc404e4b77ba9873cd96b028b6808b43cbed67ebd7ebbd8f5f77a086fb9e3eced8681019aeedeb04a0d24972a6b9ec09ea7033d4d6b9275804bd00edeb31a7788f882b5a1a7dee3b61efaf3934ce712f0349cdae321d77f390d69407932208f41cf17416fb31f2cdda5f7a440e7d8cf367e184f405a739"}, &(0x7f0000000100)=0x101) [ 1301.462994][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1301.469247][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1301.475790][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1301.482091][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1301.488589][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1301.494885][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:59:05 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40d4ebafe47dfc2d, 0x19) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x7a, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0) 11:59:05 executing program 0: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000080)=0xa66, 0xfffffffffffffffd, 0x4) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f00000001c0)={0x3, 0x3401a01, "bcc7dd335e6b5047902a3e449647c6a92744271afa9c67dc", {0x9, 0x1}, 0x7f}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x409, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0x14, 0x2, [@gre_common_policy=[@IFLA_GRE_ENCAP_TYPE={0x8, 0xe, 0x1}], @IFLA_GRE_LOCAL={0x8, 0x6, @multicast1}]}}}]}, 0x44}}, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffff800, 0x101000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="cb84000000000000030011000000ff000800090000000000080005000000000088000d0000000000080005000000000008050900000000000000"], 0x40}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80119200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x74, r3, 0x0, 0x70bd27, 0x27, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x100}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fff}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x14}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x44002}, 0x0) 11:59:05 executing program 2: r0 = getpid() r1 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r2 = openat(r1, &(0x7f0000000200)='./file0\x00', 0x7220a19e2df044c5, 0x88) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000280)={0xf6, 0x0, [0x4, 0x0, 0xfffffffffffffff8, 0x20]}) r3 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r5 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, &(0x7f0000000340)=0x10) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000140)) r6 = dup2(r3, r3) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r6, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:59:05 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6d, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6"}, &(0x7f0000000a40)=0x75) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") [ 1302.262936][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1302.269277][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:59:07 executing program 0: socket$caif_seqpacket(0x25, 0x5, 0x0) r0 = inotify_init() r1 = open(&(0x7f00000005c0)='./file0\x00', 0x200c2, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x4000082) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000640)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x4e24, @broadcast}}}, 0x90) sendfile(r1, r1, &(0x7f0000000080), 0xa198) semget(0x1, 0x0, 0x100) semctl$GETVAL(0x0, 0x1, 0xc, &(0x7f00000000c0)=""/89) 11:59:07 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) fcntl$dupfd(r4, 0x406, r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, @ip6vti={{0xc, 0x1, 'ip6vti\x00'}, {0x4}}}]}, 0x34}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:59:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000280)="0f2221f00fc78d0f80baf80c66b87deee48266efbafc0cec66b8010000000f01c1f3a60f01cf0f16c9650f58e10f01d166b80500000066b9007000000f01c1", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x26ed, 0x2, 0x5000, 0x2000, &(0x7f0000fe7000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r6 = eventfd(0x0) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f00000002c0)={r5}) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000080)={r6}) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000000)={r6, 0x80000000}) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe0000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="d180844500003665f30f201836260f01d12d0200000067263ef30f7f7f0ac74424002e67db01c744240207000000c7442406000000000f01142466b8ff000f00d0660fc7704566b84a000f00d866b810000f00d8", 0x54}], 0x1, 0x13, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x0, 0x2, 0xba92c2de00cbafff, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000000)="11dc8b0d5e0bcfe47bf070") ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r7, 0x40106614, &(0x7f0000000240)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfb]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0xfbff}, 0x0) r11 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r11, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x40) getsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0x40000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:59:07 executing program 4: r0 = getpid() r1 = socket$can_raw(0x1d, 0x3, 0x1) read(r1, &(0x7f00000000c0)=""/32, 0xa6) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x1000000000015) 11:59:07 executing program 5: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(0x0, r5, r5) ioprio_set$uid(0x3, r5, 0x400) tkill(r0, 0x1000000000015) 11:59:07 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="5c0000007d020000005500f9ff1f000000200100000005000000000000000000a8440000000004000000810000000000000013002c2d76626f786e6574315829766d6e6574312900000500706b6373310a002f6465762f7662692300378157bc95bf615c9a57972cb29214f390a5bedcd489525528e46f545da3015df5c38d9558807b913977619d01bbf9d32b88e6a5c65b3942a1e197b3ce36e757413da13ff2f7cbb9949d5ca8f88c9c7b667033359aa682b56dc43212eeb8b6a64916c0c964efe379fd2624758e331b26e60ace63ce74edf854c2dfb72fe02248be6541ddd0f76b847224d4d74a8a72c06317959044251f53abe327f11939fa8c8234037b6106df5753d1cc7203e1e4bdbee80466165554c43c11056a607a63f8a17d5630e6ea719124494d"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:59:07 executing program 3: stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000880)) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='environ\x00') readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0)=""/39, 0x27) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r1, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x800, 0x0) read$char_usb(r2, &(0x7f0000000780)=""/246, 0xf6) r3 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x7ff, 0x200) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm_plock\x00', 0x8000, 0x0) renameat2(r3, &(0x7f00000002c0)='./file0\x00', r4, &(0x7f0000000340)='./file0\x00', 0x3) keyctl$chown(0x4, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') fchdir(r5) fchown(r5, 0x0, 0x0) ioctl$KDENABIO(r5, 0x4b36) r6 = socket(0x10, 0x802, 0x0) getpeername$packet(r6, 0x0, &(0x7f00000000c0)) readv(r6, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/76, 0x4c}, {0xfffffffffffffffd}, {&(0x7f0000000500)=""/74, 0x4a}, {&(0x7f00000005c0)=""/67, 0x43}, {&(0x7f0000000640)=""/88, 0x58}], 0x5) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") setsockopt$sock_int(r7, 0x1, 0x62, &(0x7f0000000000)=0xfa, 0xfee7) getgroups(0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0]) setgroups(0x31dbe637, &(0x7f00000002c0)) r8 = syz_open_dev$mice(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x7, r8, 0x8) unshare(0x60020000) fchmod(r3, 0x30) r9 = socket$alg(0x26, 0x5, 0x0) ioctl$FITRIM(r9, 0xc0185879, &(0x7f0000000100)={0x5, 0x101, 0x4}) 11:59:07 executing program 0: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000040)={r1}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) tkill(r0, 0xd) ptrace$getsig(0x21, r0, 0x0, 0x0) [ 1304.526551][T23429] IPVS: ftp: loaded support on port[0] = 21 11:59:07 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4000000000000200, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$packet(r0, &(0x7f0000000400)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f0000002440)="0501000008003e0000000200c52cf7c25975e605b02f0800eb2b2ff4dac8897c6b068777faffffff306609000000c5471d130a66321a54e7df305f80a88161b6fd8f24feffff31772f40cfc482d71398d9837b809502639f9048a453995c937ff868c57afb98de2e6cf510f38f37a827b9b779b94b9f82df10e5dc7f94eace7331", 0x81, 0x0, 0x0, 0x0) 11:59:07 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0x6f, 0x2, 0xf7, 0x1f, 0x0, 0x4, 0x3000c, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000080), 0x4}, 0x31800, 0x439, 0x1, 0x69335894a6dcd57, 0xaa94, 0x9a6a, 0x7}, 0xffffffffffffffff, 0xf, r0, 0x3) unshare(0x20400) r1 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x0, 0x70, 0x97, 0x7, 0x81, 0x1, 0x0, 0xffffffff, 0x4, 0x10, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x8000000000000000}, 0x4000, 0x8001, 0x7, 0x1, 0xffffffffffffffff, 0x4, 0x2}) open(&(0x7f0000000180)='./file1\x00', 0x40140, 0x8) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x80800, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xfffffffffffffdc7, 0x0, 0x1, 0x0, 0x0, 0x2000800}, 0x0) execveat(r2, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0) 11:59:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000002c0)={r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r3}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r3}) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000080)={0x1, 0x381, 0x0, 0x4e, 0x3, 0x9}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4, 0x0, 0x4, 0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 11:59:08 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RWRITE(r3, &(0x7f0000000080)={0xb, 0x77, 0x2, 0x2397}, 0xb) 11:59:08 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") [ 1305.622933][ C1] net_ratelimit: 12 callbacks suppressed [ 1305.622957][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1305.635112][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1305.641493][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1305.647794][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1305.654270][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1305.660481][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1306.422860][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1306.428925][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1306.502992][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1306.509202][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:59:10 executing program 4: r0 = getpid() r1 = socket$can_raw(0x1d, 0x3, 0x1) read(r1, &(0x7f00000000c0)=""/32, 0xa6) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x1000000000015) 11:59:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vlan0\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) dup2(r0, r1) 11:59:10 executing program 5: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) socketpair(0x5, 0x3, 0x4, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r4, r5, 0x0, 0xffff) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000040)=r8, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000001c0)={r8, 0x2, 0x90}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x0, 0x9, 0x1000, 0x833, 0x3, 0x1ff, 0x1f, {r8, @in={{0x2, 0x4e24, @loopback}}, 0x9, 0xb5c, 0x5, 0xda5, 0x1f}}, &(0x7f00000000c0)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r9, &(0x7f0000000200)=0x4) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3, @time, 0x1, {0x0, 0x4}}) r10 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r10, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r10, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:59:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0xc0800) ioctl$TIOCSSERIAL(r0, 0x541f, &(0x7f0000000240)={0x97e, 0x7, 0x100, 0x2, 0x0, 0x1f, 0x3, 0x8a3, 0x4, 0x7, 0x7, 0x200, 0x8, 0x0, &(0x7f0000000180)=""/181}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x801, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x0, 0x40}, &(0x7f0000000140)=0x8) 11:59:10 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x39, 0x4, @tid=r3}, &(0x7f0000000140)) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x1, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x5, 0xf, 0x4}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:59:10 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6, 0x20}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:59:10 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x28, &(0x7f0000000080)}, 0x10) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000280)={0x0, @bt={0x7, 0x6, 0x1, 0x1, 0x10000, 0x20, 0xf8000000, 0x7, 0xc00, 0x4, 0x0, 0x5, 0x8, 0x6, 0x8f81a84e38fddba3, 0x1}}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:59:11 executing program 3: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RWRITE(r3, &(0x7f0000000080)={0xb, 0x77, 0x2, 0x2397}, 0xb) 11:59:11 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000a80)={r5, 0x20}, &(0x7f0000000ac0)=0x8) r6 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r7 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r8, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r9 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r9, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:59:11 executing program 3: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RWRITE(r3, &(0x7f0000000080)={0xb, 0x77, 0x2, 0x2397}, 0xb) 11:59:11 executing program 5: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000080)={{0x87, @loopback, 0x4e24, 0x2, 'rr\x00', 0xd, 0x5c, 0x31}, {@empty, 0x4e20, 0x2000, 0x6, 0x4, 0x6}}, 0x44) r3 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000200)=0x0) ioprio_set$pid(0x1, r5, 0x3e) r6 = socket$inet_udplite(0x2, 0x2, 0x88) utimes(&(0x7f0000000340)='./file0\x00', &(0x7f0000000580)={{0x77359400}, {0x77359400}}) ioctl(r6, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") setsockopt$inet_MCAST_LEAVE_GROUP(r6, 0x0, 0x2d, &(0x7f0000000280)={0x6, {{0x2, 0x4e24, @empty}}}, 0x88) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) r8 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r8, 0x40405514, &(0x7f00000005c0)={0x3, 0xaf51646ac91b132a, 0x0, 0xba5, 'syz0\x00'}) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r7, 0x40106410, &(0x7f0000000140)={0xa7, &(0x7f0000000400)="13593790fe8438ef18c9ff2dc0f34ee6ddb5192fd8b190e7cd1f715e48b494f43ab6f6e32923a209564debab95493069f7ddc8b0956f64dbed32c8426493c16e8a6120cf1284e6927e5bc1194f631526a7248b869b0bc15ef4eac6cc9dc152babb8cf11ede887354554a62a8d8e47156daa69d12e37481847a2e2fc375f9135d93e204a986a15867b0d376d268706459cffb938acbd6b26fd57c6db920cf1d11f3d6b283436f8b"}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:59:11 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x2) r3 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) tkill(r4, 0x19) [ 1308.636752][T23969] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20004 [ 1309.327798][T23930] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20004 11:59:13 executing program 4: getpid() r0 = socket$can_raw(0x1d, 0x3, 0x1) read(r0, &(0x7f00000000c0)=""/32, 0xa6) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x1000000000015) 11:59:13 executing program 3: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RWRITE(r3, &(0x7f0000000080)={0xb, 0x77, 0x2, 0x2397}, 0xb) 11:59:13 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RWRITE(r3, &(0x7f0000000080)={0xb, 0x77, 0x2, 0x2397}, 0xb) 11:59:13 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000a80)={r5, 0x20}, &(0x7f0000000ac0)=0x8) r6 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r7 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r8, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r9 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r9, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:59:13 executing program 5: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x3, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:59:13 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) r4 = getpgrp(r3) ptrace$cont(0x9, r4, 0x9, 0x0) tkill(r0, 0x1000000000015) 11:59:13 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x501880) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 1310.663077][ C0] net_ratelimit: 18 callbacks suppressed [ 1310.663101][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1310.675399][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:59:13 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c00810ee00f80ecdb4cb9e307f029a00d0000002f003efb0a0002000000000000000f00030005000000", 0x2e}], 0x1}, 0x0) r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) fstatfs(r1, &(0x7f0000000100)=""/233) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000200)={0x0, 0x1, 0x6, @random="d65721a910e9"}, 0x10) [ 1310.832797][T24150] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1310.842192][T24150] bridge: RTM_NEWNEIGH with invalid ether address 11:59:13 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) fremovexattr(r2, &(0x7f0000000080)=@random={'btrfs.', '/dev/snd/seq\x00'}) tkill(r0, 0x1000000000015) 11:59:14 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000000)=0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r11 = eventfd(0x0) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f00000002c0)={r10}) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f0000000080)={r11}) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f0000000000)={r11}) kcmp(r5, r7, 0x0, r3, r9) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r12 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0xc) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3}, 0xb) ftruncate(r12, 0x200004) sendfile(r0, r12, 0x0, 0x80001d00c0d0) 11:59:14 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-generic)\x00'}, 0x58) r1 = socket$inet(0x10, 0x4, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r4 = syz_open_dev$swradio(&(0x7f0000001440)='/dev/swradio#\x00', 0x0, 0x2) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000001480)) r5 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xfffffffffffffe23, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x80) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r5, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=""/4096, 0x1000}}, 0x10) dup3(r1, r3, 0x80000) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000002c0)={0x4, &(0x7f0000000280)=[{0x3, 0x2, 0x9, 0x7}, {0x4, 0x5, 0x1}, {0x7f, 0x3, 0x2e, 0xfff}, {0x8, 0x7, 0xd1, 0x6}]}) write$binfmt_misc(r2, &(0x7f0000001340)={'syz0', "bba0efe6684a4bad379d0ae5797ba1457f2d52b57e5499c9422434520840be6c21732e9c56255ab5678162a92847b60178ccf297ab7c3d34fbf31f654ff5d88f37e4e8436cf52663ae00e0343986924514df2d247ad6b21a2979dce766d665547c156ecea7756c3a592443e50c07ddeba286aed35b5fdbbf2296099a435d56b40b2fb7e63ff1fd9ecb3723743b3ad6289552e4a68aee399a78a05010bb2ab4f0b6e753bbf48b8074099f9bfc2da950ae08c193d7ea61f9c76a5f06bbd7a1e4e87cfc25016291d4f3e26e3dcf5b6ad9836e95051f738a32a2ea6c26c6f399cd67d27c"}, 0xe6) r6 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000000)={{0x3, 0x0, 0xfff, 0x0, 0xfffffffe}}) r7 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x3, 0x101000) r8 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x0, 0x2) ioctl$LOOP_SET_FD(r7, 0x4c00, r8) 11:59:14 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000a80)={r5, 0x20}, &(0x7f0000000ac0)=0x8) r6 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r7 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r8, &(0x7f0000000b00)=ANY=[@ANYBLOB="5c0000007d020000005500f9ff1f000000200100000005000000000000000000a8440000000004000000810000000000000013002c2d76626f786e6574315829766d6e6574312900000500706b6373310a002f6465762f7662692300378157bc95bf615c9a57972cb29214f390a5bedcd489525528e46f545da3015df5c38d9558807b913977619d01bbf9d32b88e6a5c65b3942a1e197b3ce36e757413da13ff2f7cbb9949d5ca8f88c9c7b667033359aa682b56dc43212eeb8b6a64916c0c964efe379fd2624758e331b26e60ace63ce74edf854c2dfb72fe02248be6541ddd0f76b847224d4d74a8a72c06317959044251f53abe327f11939fa8c8234037b6106df5753d1cc7203e1e4bdbee80466165554c43c11056a607a63f8a17d5630e6ea719124494d"], 0x5c) r9 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r9, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:59:14 executing program 4: getpid() r0 = socket$can_raw(0x1d, 0x3, 0x1) read(r0, &(0x7f00000000c0)=""/32, 0xa6) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x1000000000015) 11:59:14 executing program 5: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x840, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) getpeername$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote}, &(0x7f00000002c0)=0x1c) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) r5 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x3, 0x2) ioctl$KVM_GET_MP_STATE(r5, 0x8004ae98, &(0x7f00000000c0)) 11:59:14 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xfffffffffffffffe, 0x4422) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x100004}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x24}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000040)=r5, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000001c0)={r5, 0x2, 0x90}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={r5, 0xfffff872}, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="c700000034002908000000000000000003000000c70000003b000100ffff0000000000000000b5068848fff2"], 0xfde8}, 0x1, 0xffffff7f0e000000}, 0x0) [ 1311.525773][ T31] audit: type=1326 audit(1574337554.575:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=24264 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45d47a code=0x0 [ 1311.621225][T24282] netlink: 99 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1311.630925][T24282] openvswitch: netlink: IP tunnel dst address not specified [ 1311.862948][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1311.869383][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1311.876002][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1311.882688][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1311.889332][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1311.895796][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:59:15 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000006840), 0xc, &(0x7f0000006800)={&(0x7f0000000000)=ANY=[@ANYBLOB="28009c2c2e4c22dd6cff00001c00070f00000001c7a51d86", @ANYRES32=r2, @ANYBLOB="000003000a0002000380c20000000000"], 0x196d}}, 0x0) 11:59:15 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x174, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER={0x50, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ip6gre0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_BEARER={0xe4, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd83a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb42fbd03}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3f}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}]}, 0x174}}, 0x101) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x28400201}, 0xfffffffffffffe5c, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000280)) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) dup2(r1, r1) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 1312.288565][ T31] audit: type=1326 audit(1574337555.335:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=24264 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45d47a code=0x0 11:59:15 executing program 4: getpid() r0 = socket$can_raw(0x1d, 0x3, 0x1) read(r0, &(0x7f00000000c0)=""/32, 0xa6) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x1000000000015) 11:59:15 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, 0x0, &(0x7f0000000ac0)) r6 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r7 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r8, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r9 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r9, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:59:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x3f, 0x2) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe7) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000002c0)={r2}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000000)={0x0, @aes128}) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd605b43f800142f00fe880000000000000000000000000001ff0200000000000000000000000000010000883e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="53e9d7845a2fd44fef7d962620bcf968d2666cb4e726e6314d7335fec1c586d6cd6c444b77fd4269c64636b8f3b35b94e17d34c885da8aa863a782c71f8203d9a03dd89830"], 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000000c0)=0x0) r7 = gettid() ptrace$setopts(0x4206, r7, 0x0, 0x0) tkill(r7, 0x3c) ptrace$cont(0x18, r7, 0x0, 0x0) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r7, 0x0, 0x0) r8 = getpgrp(r7) r9 = gettid() ptrace$setopts(0x4206, r9, 0x0, 0x0) tkill(r9, 0x3c) ptrace$cont(0x18, r9, 0x0, 0x0) ptrace$setregs(0xd, r9, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r9, 0x0, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) ioctl$KVM_IRQFD(r11, 0x4020ae76, &(0x7f00000002c0)={r12}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) r14 = fcntl$dupfd(r13, 0x0, r13) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(0x0, r15, r15) sendmsg$nl_generic(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x1614, 0x2c, 0x300, 0x70bd2d, 0x25dfdbfc, {0x6}, [@typed={0xc, 0x12, @u64=0xda}, @generic="be2e89f1ba7b2465f0a34dfbea59eb5a443eb0141b250ebd89ad1e7386474659e5d0edcc2e1379075b244624ab2bf4b2b071a7f2ea0912087774186c39d8ba746c00ddb6c935156d24a83bdf5405b27b47ca4d71cf3e52871007309639b1a574f275d58870cca68ce90db2db95a7fc8c27be06632ca0e2d5d57c2e6cade1eb84596bdef83683d1aeb352a35a032b823bebe6dba5ec1950d754acd6de911f8202fcc08b76f60de6515906fd3ffafea0ef0aaa760e9894eafa67c62ab97c580fa2", @generic="e4", @nested={0x24c, 0x7e, [@typed={0x8, 0x5e, @u32=0x3}, @typed={0x14, 0x1, @ipv6=@loopback}, @generic="63b0c501e4747b1a1390f2a85f98086637f4aa8349a7fef88e32d662", @generic="4d1f1c1c6e48ee595fb24b9160836844ff86759591ce488f24190f41eb3f8c93fea306903d2ce7740cf898d33e4dea2913b44bd50858695baee454c282f0979a6317c37f029abc89d028ed964b7d587e22067dfcf37365a85a850c30f34ce35cbb2d5a7f21b2a82e75492e5ea76d4b13cedd05451e33140da2", @generic="06389d2813e23db286b454cbbb4e24017501d37803bc8e9db0c4f4ac732b67d8185fa5314e918395bab6a9a4e2ae1714e19f95855389d42c97ce4511a3bc754ea399321a17223346e3d3fcc8665ac6ecac247786fee96376624a76b9021dcaba2a225687248e0560380dc066bd7645bc2b41bcf06327eb963dbaa222a89314256e34d013", @typed={0x8, 0x32, @pid=r5}, @generic="09d83adecbf813b39aaca1995ed43cf24d6bffa117c04d19", @typed={0xe0, 0x35, @binary="c36d172a50618f28c9c894433ac24017448eb7734bde329bbb40b81343f6b2bf2d316d293b8e0f50b308a1f5dcc4a4d4a2bb71b775a9a70f7d2e354b051b4089414628af5c71f231cf20fac37fc6e4183a15543f12c96982add0ccca26ee3bb465c7165c44fbec286deee8cb194cbc85ea6caa06cbcd5edcef7043b26b48bf1659a1ce87870072616d1f2fb0a304d09d14f9df52cf5c9d0e3eb8300f3df6ff13737f32384033ef74fb2d20699934e8f23eb773c1014b847e6352f3f8f68287884a519733312e32b20178f8083296cf47ca3db74c22d95a1d395d"}, @typed={0x8, 0x48, @u32=0x5}, @typed={0x8, 0x1, @pid=r6}]}, @generic="707cee834287bdcc6e3c537be7ce8684e95d3f23e3ca0488b290a863a32735d1a379d9aa36af6d2f788ab39e825ca21e134b16047df53f9d07c783f9fc7e306659b813529878baa75292c35ab52787f714674c29ca7e0cf4c8cae8be588551ee22f5f731b908af74aeb1f1f672fdef352e1d864cbec20e60315ed11d64f713b54a0924fe65efa19738962e75f5a74c0f8d5450232f06bf36df527e3f474d9284085e881122c45658548264d09799d0bd", @typed={0x8, 0x28, @pid=r8}, @nested={0x11ac, 0x54, [@generic="a24a8b4da2de6ad187cd031d3348fa0fe6b516a3c586c294501e7e2c0bcaae7876b33d994b10955138b4dc53d5d7f46fcd43f3ce19f29826c492687660ba2a8af648a3a60a103d46c2979c0690c05c524b22f5f5923b0e7e5fcd0c8087eb2a5ce7dac6591c5c1939c8c69b630cc6e3076400acf73c178f45b0ea428daae6e3287103dad1790ffcb3b5fd7553dbb8633fce52c294849eb1e3af750aeff9784e70ab8a9779e736b87756ea8e6d195b9bdb9beb53812d06b9b481aa5a624006b5581edba346a0ad7e9d084a484ace9d5b2a0fd1701bdef456ebfc3da39a520204876c303cc2f872ae0ea3c40e81aa1446053b87b83ba98f9af2bc", @typed={0x8, 0x24, @pid=r9}, @typed={0x8, 0x2b, @fd=r12}, @typed={0x14, 0x4d, @ipv6=@remote}, @generic="a38bb702b04107b72c53b7e57fd1a92967eb986a70d8193de3349e51f332a8a60b9fc0a8545aae8b53a39b0c248766e03877e7e07b05a1e2d07afe6a39e9b0a4bcf7b5bd008efd89ca960d3f5538a583e8677fe70b3b355a39a9c832f2bbb4d7f1463e8a9dde58ee6cb26ed400db0a377639697b03447e8d65702e1a992ea4", @typed={0xc, 0x79, @u64}, @generic="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"]}, @nested={0x80, 0x8b, [@typed={0x10, 0x6e, @str='/dev/kvm\x00'}, @typed={0x8, 0x17, @u32=0x80000001}, @typed={0x8, 0x68, @fd=r0}, @generic="69f5f8126aa5b5617aca52235f9457", @generic="8d05623164358631e34115fb793143aa33b3a4fff50321935bbed959fa10d6325701fdf90e4d0c055e7ac65d7898cf68024554857d38e78489082e59fdea630891f156", @typed={0x8, 0x8f, @uid=r15}]}]}, 0x1614}, 0x1, 0x0, 0x0, 0x10}, 0x8801) 11:59:15 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xb) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r2 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000001c0)={r1, 0xe5, "05a53ddde46c0e3143312167a42e688129310992c707406ae4cf30a953b9e587837e6d600063714638e6b3b2b41ce9b271421e1404e975a97e86d160a5f53dc4546104b68b18b77f67177d1bfd6bccd344af0342120aa728ad5f6dd5dc1339b4e61fabff2bf5402c083c78d210fa6006165fe6e2fe651eb5485810208d2bd32bd274843482b7d95800bc8c01c0730013c4a69790982755600fbf3503ebcc83529d242f2558a92bdc6b0edc1413e6ac53756529981e988c6d5d8ce4eb12f9562a60d767ce0f427c0988b1fd42b4852146c8e345edac13d0ff88560c281019529717ced4c112"}, &(0x7f00000000c0)=0xed) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x77, &(0x7f0000000080)={r1}, 0x8) 11:59:15 executing program 5: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xffffffffffffff31, 0x486280) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x1, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) r4 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r6, r7, 0x0, 0xffff) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r8, 0x84, 0x78, &(0x7f0000000040)=r10, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000001c0)={r10, 0x2, 0x90}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000280)={r10, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x6, 0xffff, 0xfffffffd, 0x7fffffff, 0x401}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r11, 0x1}, 0x8) [ 1312.526512][T24502] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0001 with DS=0x5 11:59:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x4800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x1b1, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"/375], 0x18}}, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x0, @perf_config_ext={0x0, 0x800000000000029}, 0x100, 0x3, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) 11:59:16 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x8, 0x940) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000000c0), 0x4) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r5, r6, 0x0, 0xffff) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000400)={0x1}, &(0x7f00000003c0)=0xffffffffffffffcf) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r7, 0x84, 0x78, &(0x7f0000000040), 0x4) prctl$PR_SET_DUMPABLE(0x4, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x2, 0x90}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="e3000000e8025a4186925e1079acaedafcd856464ab38ebb3b94357ab7d31d8687ac04e55ffd475aa78ad7afcff4a2a2b0b5939d19284cac0712257aaf64b70b389b439825876167562952ff137b19fd65b4fb8fc4412a7d20c9b8840c3dbd828f6b5352884936002a25f95a1a1b143ea92628f29a509e236f054169c5564afc9f01b6f6182a3b54695efbb5bdde94a145b1113352f2e0e1d2a0875d16ee95e2cd61ff95b66420248e4bd7b66481fc2659aa3bf29717eac9644836c8ba81ad081de3070457371f2bad7c231c3abfc0103741c84c17e0fc4a46b626ec3c24d4506278d28a6d93f1"], &(0x7f0000000140)=0xeb) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000200)={r9, 0x6}, 0x8) tkill(r0, 0x1000000000015) 11:59:16 executing program 4: r0 = getpid() r1 = socket$can_raw(0x1d, 0x3, 0x1) read(r1, &(0x7f00000000c0)=""/32, 0xa6) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x0) 11:59:16 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, 0x0, &(0x7f0000000ac0)) r6 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r7 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r8, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r9 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r9, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:59:16 executing program 5: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:59:17 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) timer_create(0x3, &(0x7f0000000100)={0x0, 0x12, 0x0, @tid=r3}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:59:17 executing program 4: r0 = getpid() r1 = socket$can_raw(0x1d, 0x3, 0x1) read(r1, &(0x7f00000000c0)=""/32, 0xa6) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x0) 11:59:17 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, 0x0, &(0x7f0000000ac0)) r6 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r7 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r8, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r9 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r9, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:59:17 executing program 2: getpid() r0 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r2 = clone3(&(0x7f0000000200)={0x810200, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140), 0x31, 0x0, &(0x7f0000000280)=""/174, 0xae, &(0x7f0000000340)=""/76}, 0x40) tkill(r2, 0x120015) 11:59:17 executing program 5: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) r2 = getpid() r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x70, 0x8, 0x6, 0x5, 0x7, 0x0, 0x1d4d, 0x1, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3f, 0x6, @perf_config_ext={0x9, 0x7}, 0x100, 0x1ff, 0x7ff, 0x4, 0x0, 0xe725, 0x56}, r2, 0x8, r3, 0x2) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r4 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r5, 0x402c5342, &(0x7f0000000380)={0x0, 0x0, 0x20}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x77359400}, {0x77359400}}, 0x0) tkill(r0, 0x1000000000015) 11:59:18 executing program 0: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) clone(0x20986100, 0x0, 0x0, 0x0, &(0x7f0000000100)="d353ff072d68b2e4dc14aa5fa8b3d94c22") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(0x0, r7, r7) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@loopback, @in, 0x4e24, 0x8, 0x4e24, 0x7, 0xa, 0x180, 0x20, 0x1d, 0x0, r7}, {0x4b, 0x81, 0x7ff, 0xfffffffffffffffd, 0x9, 0xea, 0xfffffffffffffeff, 0x1ff}, {0x8, 0x759, 0xffffffffffffff00, 0x1}, 0x5, 0x6e6bbd, 0x0, 0x0, 0x2, 0x3}, {{@in6=@rand_addr="8be8d8a83653a5fc9c346b0c3e74630c", 0x4d5, 0x6c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x9b53aa950c6c6e78, 0x8, 0x3, 0x81, 0x8}}, 0xe8) setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0) bind$inet(r2, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2}, 0x10) listen(r2, 0x0) r8 = dup3(0xffffffffffffffff, r2, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) clone3(&(0x7f00000005c0)={0x20054300, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000440)=0x0, 0x2a, 0x0, &(0x7f0000000480)=""/16, 0x10, &(0x7f00000004c0)=""/250}, 0x40) r11 = gettid() ptrace$setopts(0x4206, r11, 0x0, 0x0) tkill(r11, 0x3c) ptrace$cont(0x18, r11, 0x0, 0x0) ptrace$setregs(0xd, r11, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r11, 0x0, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r15 = eventfd(0x0) ioctl$KVM_IRQFD(r13, 0x4020ae76, &(0x7f00000002c0)={r14}) ioctl$KVM_IRQFD(r13, 0x4020ae76, &(0x7f0000000080)={r15}) ioctl$KVM_IRQFD(r13, 0x4020ae76, &(0x7f0000000000)={r15}) fcntl$getownex(r13, 0x10, &(0x7f0000000600)={0x0, 0x0}) sendmsg$nl_netfilter(r9, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x900000}, 0xc, &(0x7f0000000640)={&(0x7f00000008c0)=ANY=[@ANYBLOB="5c0200000e07000327bd7000fddbdf250000000008002e00", @ANYRES32=r10, @ANYBLOB="1400570008003000", @ANYRES32, @ANYBLOB='\b\x00a\x00', @ANYRES32=r6, @ANYBLOB='\r\x00\x00K', @ANYRES32=r7, @ANYBLOB="f80034005b86f0e69b9a9d7d995f08cfe3d957c329926f78c8ca9578201cfa5d3235c684f670d640dbd58d985af167a03a556f6b08aa1b6780a5f2b3ab5e64dd50f6b1443488fa920dff722d4154fb029ec4d1c37e2830ffff56cd48e1f7bc0b918253b2d4a49b8d2bafd853b6b87c1c176e60a39ea10f6854460875de2095f521f9fed1063e2ea3327c56548a6b593d84d684169cda2907946abb6e6089c34765b08bf6306873870e5e7c7015b572ab14ef64359b86a49024fff016f3a3e21c2fee3cae0292ac797f503c146e76be8514be3a0e7857b6d2c85d81e4e1eb1000310027766d6e6574302dc100000008008800", @ANYRES32=r11, @ANYBLOB="00002c0130000c00120008000000000000000b3c7ca9552ddebc875fe2d9cbbd489ce498a345f259ad63827b039d19437382e9cd38f9fb1e75445f0e464b75f5b3ceadecce3aa7c7ee3ee5cb4024f710218472212f63c2eebf4e5d3279a8b8ee3843244ad89f4a87a1bfcdd4713c5758d3ccefdc0faffb5c6153c5eaf85e72c6cb4b9f1679c3f93b45abe569c47b4ff0d0fc6f4b42588236fec349188652eea959e1263463a754f006b3d5507168c6c2d2df5d6ab413ef2fd742e20d8a266e99a74847d1fdfbc7412d884d121497576d9316a86129011bbfed9463fccc981a99f267b9b0ded509489b78f16b50a4c15dc6c49530e83c0734c0cbad2194350808000c00", @ANYRES32=r16, @ANYBLOB="08000a00ffffffff70252d85c2a62d82d0f82ef4e0d2e8ea5829e4839c838f1e3ee3cff8190000"], 0x25c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r17 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1ab802, 0x0) readv(r17, &(0x7f0000000880)=[{&(0x7f0000000080)=""/8, 0x8}], 0x1) ioctl$DRM_IOCTL_ADD_CTX(r17, 0xc0086420, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r8, 0x40086424, &(0x7f0000000300)={r18, 0x3}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000040)={r18, &(0x7f0000000240)=""/172}) r19 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) r20 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r20, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r20, 0x80386433, &(0x7f0000000080)=""/31) 11:59:18 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'netdevN\xcaw\x00', @ifru_data=&(0x7f0000000180)="b06f31673d3da2b793d4f9a507e315000000ce8f566e538ecf882900007f4ac0"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'all\x00\x19\x00\x00!C\x19\xb2d\xb4\xa0\xb4v', 0x420000015001}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x40180, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r7 = getgid() getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000280)={@rand_addr, @initdev}, &(0x7f00000002c0)=0xc) write$P9_RGETATTR(r3, &(0x7f00000000c0)={0xfffffffffffffe88, 0x19, 0x1, {0x0, {0xd, 0x1, 0x7}, 0x0, r6, r7, 0xfffffffffffff33b, 0x4, 0xaa, 0x0, 0x0, 0x8, 0x80000001, 0x44, 0x200000000c07, 0x6, 0x8, 0x100000001, 0x100000000, 0xfffffffffffffffc}}, 0xa0) 11:59:18 executing program 4: r0 = getpid() r1 = socket$can_raw(0x1d, 0x3, 0x1) read(r1, &(0x7f00000000c0)=""/32, 0xa6) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x0) 11:59:18 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={0x0, 0x20}, &(0x7f0000000ac0)=0x8) r6 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r7 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r8, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r9 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r9, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:59:18 executing program 0: r0 = socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x10) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) socket$inet_dccp(0x2, 0x6, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/prev\x00') ioctl$TCSETA(r1, 0x5406, &(0x7f0000000100)={0x9, 0x8, 0x8, 0xff, 0x2, 0x20, 0x89, 0xa8, 0x6, 0x1}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x10900, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000200)={0x364, r3, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffbff}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ip6gre0\x00'}}]}, @TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7646beb4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_LINK={0xe8, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2b}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MEDIA={0x60, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbac}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x74}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x27b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x16c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xff}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffb43c}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x65}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0e2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbab}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xba}]}]}]}, 0x364}, 0x1, 0x0, 0x0, 0x1000}, 0x4044) r4 = memfd_create(&(0x7f0000000700)='wlan1em1:bdevvboxnet1\x00', 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000740)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000600)="5679328320e2c28f0c18bbd270d1e06f22bf53bbee15fbf0de4262f0c4b6236cd7c8a7352d0e401476ff4457e1251cc3002ed223dc403b364e70bf54a5000674dcd0f6a5d46fa9d812b9b7f7474adfb2bd0dbe7f561a384a80cc611ce385ed7d0c32e9f81a650d7960c4c6c5ada38d9333701ea53eaa1a5895adb06844c303c07568a0d189674f1639006c5c2b4b8f17b3a614cb1a6efff96e4c995d1865ea2006e0b2fa7704ff49c5b5c5ffab373d6433e3e508d134b1e4f3e0d6f7975ae661d2c1b078e152ec716260e65428d94ea15a63b18e23c39c9b9c2670af639652606200cd1968aac0", 0xe7, r4}, 0x68) r5 = accept(0xffffffffffffffff, 0x0, &(0x7f00000007c0)) sendmmsg$inet(r5, &(0x7f0000000e40)=[{{&(0x7f0000000800)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000840)="453a9a031139a40cc7d4caa643acee6c58e020494f1c470205162ea5decee9c96b43b7f4ccd582b793b68aab6d20ff9fc190f4718d244f199317400f42500c4119fc395251c1fab5a5520f9e18864842f48961739a65eca0d5b04898933debb36966a001edf3a35d0fc5cfe3e2b4592f2ac3bfd9d459f12b30ac246a70d5a9bc8c9d848f1289e9ceb78783ef54cfc38c6019a002c394d1d67c21996b8ab0a3cbb0e896d8d47bb9de4e80575f171e0d09688f8959f5829c0fcc41254543b5ac92fae447139a0440831712bf71ec912d4bc5b93985907f835c2aa90a17fb806d37be1dcb1870f6bfb79db0609bb6ced19eaf8aee", 0xf3}], 0x1, &(0x7f0000000980)=[@ip_retopts={{0x30, 0x0, 0x7, {[@lsrr={0x83, 0x1f, 0x9, [@remote, @empty, @rand_addr=0x2, @multicast2, @dev={0xac, 0x14, 0x14, 0xe}, @dev={0xac, 0x14, 0x14, 0x19}, @broadcast]}]}}}, @ip_retopts={{0x68, 0x0, 0x7, {[@end, @cipso={0x86, 0x19, 0xfffff001, [{0x0, 0x6, "b33b7ee6"}, {0x0, 0xd, "a75cbcac6592c49a3122e1"}]}, @cipso={0x86, 0x1b, 0xfffffe01, [{0x0, 0x3, "12"}, {0x0, 0x12, "09320af04ef0772198a188106430f8b6"}]}, @lsrr={0x83, 0x13, 0xff, [@empty, @empty, @loopback, @multicast1]}, @lsrr={0x83, 0xf, 0xff, [@broadcast, @loopback, @broadcast]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x74}}], 0xc8}}, {{&(0x7f0000000a80)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000ac0)="01ad857b7ead7c2458989c29c526febd20c270ee93b0316a286a4793445b1f8d86aedbf1f6d9702e82086cf88db45df75cc05e1452470c0850dae03077a991f371df453cbd38cf5634485bd5e1487b2e64533f8f517cfd64d696af350b46fd89", 0x60}, {&(0x7f0000000b40)="91dcdb7adb4246d821ee945d7b5d53fdedaa4e7744ce", 0x16}, {&(0x7f0000000b80)="24ba9a1ca88cbe6e079d03eb6f56297be6f00c557a744432be2027a4dc34b5b42de60049615491376c8a949fa9c16ea640b40e420bb4febb15591e7689f6c65b9b0a661558559a980b236fe73bcc31700f", 0x51}, {&(0x7f0000000c00)="5ca7d0986ae7becf136a47275cb533465dd6008e3a73b1bbf3f61a3c5f32f6575e47e1c970c08d0100a6bf63863955296ffc647536097ed548fa9dfa3924f8b6a2f536e7ef191368c42d49e4c25964ea708a2811f080a3d5c7372f1676261079bdb1729acbcb32615ab2b59063fe8a07b3e95ee3a465d0f5d708616420cb78557fd2f8e53f81cda02cb06af4416bf81ff9143cd56826f7b7432516069423650b93f711a0ebd15d16ea0e88fe67314a090d583845004552b7c7e60b80c3114bc7676d45f8f3981c874799003493e1707a8c3991104b2f16e75c7ae5164fe4b4d1e710de8040e56cf423a2d6b36360aeb0b2d59cb096bd02a688", 0xf9}, {&(0x7f0000000d00)="9554b225b95db17705a42f1a5d7fdd80a0780c74a114e120c3d2c20f6737ec419010f0b22d3c7b1eae6e06dc62", 0x2d}], 0x5, &(0x7f0000000dc0)=[@ip_retopts={{0x80, 0x0, 0x7, {[@ra={0x94, 0x6, 0x1}, @ssrr={0x89, 0x17, 0x94, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xc}, @local, @loopback]}, @end, @noop, @lsrr={0x83, 0x23, 0x81, [@dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x9, @empty, @dev={0xac, 0x14, 0x14, 0x26}, @multicast1]}, @end, @end, @lsrr={0x83, 0x1b, 0x8, [@broadcast, @rand_addr=0x9a, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @broadcast]}, @ssrr={0x89, 0xf, 0x63, [@empty, @dev={0xac, 0x14, 0x14, 0x15}, @multicast1]}]}}}], 0x80}}], 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000ec0)) r6 = fcntl$dupfd(r0, 0x406, r5) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, &(0x7f0000000f00)={0x2, 0x1, 0x4, 0x2, 0x5}) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/sequencer\x00', 0x100, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r7, 0x10f, 0x83, &(0x7f0000000f80), &(0x7f0000000fc0)=0x4) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000001000)=@assoc_value={0x0, 0x20}, &(0x7f0000001040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001080)={r8, 0x70, "87fbc471accd86e9e6479f40eb769f441deb1927905a5106bf73e8a9420eb09ed1f6f37bb0350245873b3eae9ee8e3c1d14845b2ec1af5ba2405109a1a60754f645f73f40d3d71ed76b382b647463de3e0e441d57c644aa6a9d609439ee5affe53b54c28e32643ddab5b2164907eb3ec"}, &(0x7f0000001100)=0x78) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001140)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$RTC_WIE_OFF(r9, 0x7010) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001180)={0xffffffffffffffff, 0x8d24, 0x10}, 0xc) ioctl$sock_netdev_private(r7, 0x89f3, &(0x7f00000011c0)="722c6d9d2b08b4d3acbc5a92d5e66b143dcbdd8f284f11f05d0325abf40c374fa3aa848f9f92e984fe631b013a98b04c752e09e909a1320a8400d61194134313c258003c659f8d8db9d1aabdc3fb2af692cae9643cf5c38c51c5c9b7abca8cbb32f6d7c8f871bf503190d73871bb8ea6e12659c07af692cf57d2d31929333bfedc62") r11 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001280)='/dev/dlm_plock\x00', 0x4000, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r11, 0x6, 0x1d, &(0x7f00000012c0), &(0x7f0000001300)=0x14) r12 = syz_open_dev$video4linux(&(0x7f0000001340)='/dev/v4l-subdev#\x00', 0x158fbc21, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r12, 0xc040563d, &(0x7f0000001380)={0x0, 0x0, 0x102, 0x0, {0x4aa, 0x81, 0x4, 0x800}}) ioctl$void(r10, 0xc0045878) r13 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/btrfs-control\x00', 0x901144, 0x0) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001440)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r13, &(0x7f00000015c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0xd7ab73d2f44558a9}, 0xc, &(0x7f0000001580)={&(0x7f0000001480)={0x100, r14, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xcc1b}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x38, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfd}]}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0x58, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x40}, 0x44008100) 11:59:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x181880, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r1, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), 0x4) 11:59:18 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) r2 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x40, r4, 0x87b6acc0a996a4cb, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}]}, 0x40}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x101040}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0xa8, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xc}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fffffff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3ec}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x480000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0xd94dba8466820c53}, 0x4) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3, @tick, 0x0, {0x0, 0x2}, 0x8}) r5 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r5, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) connect$tipc(r5, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x4, 0x2}}, 0x10) 11:59:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8002, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x444200) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000180)={0x4, 0x401, 0x5, 'queue0\x00', 0x8001}) write$P9_RSTATu(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="f10000007d00000005d20000000000050000000000000000000000000000bfbdfaf8039e0b7978731fc1f50000000000008e9bd54d0009006664696e666f2f33001f007070703170726f63766d6e657431dd297742c1fefd197318116c616e302b5d5a006367726f75e95270701f2d28089eb9eabc8d344c88328c9aa284da360e02bb30fb87916e7024abe6a15a703329dc2dd340173a7c85b48cb76d73d5a35ead84a1f5a9c66fc4078e824b28029d84c446f9bbada2e9f239c4d3049e42c62674e5f1a94e3cfdee1d97c71d00e4b10d5d2d720104c37679b95df93d165c7fa1e55a829b13579fadccc0a0fec7bc6907db3955e5f20d2d52e16c5d1be0912d54413881362a402e5fe51a9aa28d5fb688a5c6388f85b1ab1803e287bcbedd75e2a41ca016007d9738d2", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xf1) [ 1315.870389][T24794] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 11:59:19 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000001c0)="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") sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x1) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000100)=""/109) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r2) ioctl(r3, 0x3, &(0x7f0000000540)="070000000000001edeb051aa0022a17e2157cd7ee4390ffc787b3ea0d245038adff768ea4ad58bfd64ff84423f0e53d7f16866a8b09137feb1cbfaa3988d790fbea95f99a6dcaf5424afcbdaf894202dff121ba4d7f5e4131d9b994018160dd63ae71aa51ede3ae0f3894a78bcbaaaa21e2b72c334c243f09f967d57aa970ef190bceb44949853d77a5cfb8160d0855043973224674133") ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x5865, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9000000010003b2400e625010b00fffff0000000", @ANYRES32=0x0, @ANYBLOB="97b90800000000aba19fc67b004a", @ANYRES32=0x6, @ANYBLOB="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"], 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) [ 1316.022761][ C1] net_ratelimit: 14 callbacks suppressed [ 1316.022783][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1316.034871][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1316.041194][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1316.047357][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1316.053688][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1316.059838][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1316.119905][T24800] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.0'. 11:59:19 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d", 0x37}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x266, 0x0}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xd9, 0x250440) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000040)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)) ptrace$cont(0x20, r0, 0x0, 0x0) 11:59:19 executing program 4 (fault-call:2 fault-nth:0): r0 = getpid() r1 = socket$can_raw(0x1d, 0x3, 0x1) read(r1, &(0x7f00000000c0)=""/32, 0xa6) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 1316.665029][T24797] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1316.822947][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1316.829105][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1316.902809][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1316.908841][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1317.235609][T24805] FAULT_INJECTION: forcing a failure. [ 1317.235609][T24805] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1317.249009][T24805] CPU: 0 PID: 24805 Comm: syz-executor.4 Not tainted 5.4.0-rc5-syzkaller #0 [ 1317.257704][T24805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1317.258872][T24805] Call Trace: [ 1317.258872][T24805] dump_stack+0x191/0x1f0 [ 1317.258872][T24805] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1317.258872][T24805] should_fail+0xa3f/0xa50 [ 1317.258872][T24805] should_fail_alloc_page+0x1fb/0x270 [ 1317.258872][T24805] __alloc_pages_nodemask+0x3c1/0x60c0 [ 1317.258872][T24805] ? update_stack_state+0x9c4/0xad0 [ 1317.258872][T24805] ? stack_trace_save+0x11c/0x1b0 [ 1317.258872][T24805] ? stack_trace_save+0x11c/0x1b0 [ 1317.258872][T24805] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1317.258872][T24805] ? update_stack_state+0x9c4/0xad0 [ 1317.258872][T24805] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1317.258872][T24805] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1317.258872][T24805] ? update_stack_state+0x9c4/0xad0 [ 1317.258872][T24805] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1317.258872][T24805] ? __module_address+0x68/0x5e0 [ 1317.258872][T24805] ? is_bpf_text_address+0x3c5/0x4b0 [ 1317.258872][T24805] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1317.258872][T24805] alloc_pages_current+0x68d/0x9a0 [ 1317.258872][T24805] __get_free_pages+0x33/0xc0 [ 1317.258872][T24805] __tlb_remove_page_size+0x340/0x560 [ 1317.258872][T24805] unmap_page_range+0x20c9/0x3f80 [ 1317.258872][T24805] ? stack_trace_save+0x128/0x1b0 [ 1317.258872][T24805] unmap_single_vma+0x43f/0x5e0 [ 1317.258872][T24805] unmap_vmas+0x391/0x4b0 [ 1317.258872][T24805] exit_mmap+0x50e/0xa00 [ 1317.258872][T24805] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 1317.258872][T24805] __mmput+0x148/0x590 [ 1317.258872][T24805] mmput+0x83/0x90 [ 1317.258872][T24805] exit_mm+0x6b7/0x770 [ 1317.258872][T24805] do_exit+0xae4/0x3a70 [ 1317.258872][T24805] do_group_exit+0x18a/0x320 [ 1317.258872][T24805] get_signal+0xbf6/0x32f0 [ 1317.258872][T24805] ? sock_read_iter+0x47c/0x660 [ 1317.258872][T24805] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1317.258872][T24805] ? kmsan_get_metadata+0x39/0x350 [ 1317.258872][T24805] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1317.258872][T24805] ? do_signal+0x56/0xe10 [ 1317.258872][T24805] ? do_signal+0x56/0xe10 [ 1317.258872][T24805] do_signal+0x6f/0xe10 [ 1317.258872][T24805] ? task_work_add+0x251/0x2c0 [ 1317.258872][T24805] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1317.258872][T24805] prepare_exit_to_usermode+0x2c5/0x4d0 [ 1317.258872][T24805] syscall_return_slowpath+0x90/0x610 [ 1317.258872][T24805] do_syscall_64+0xdc/0x160 [ 1317.258872][T24805] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1317.258872][T24805] RIP: 0033:0x45a639 [ 1317.258872][T24805] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1317.258872][T24805] RSP: 002b:00007f7eeeb8cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1317.258872][T24805] RAX: fffffffffffffe00 RBX: 00007f7eeeb8cc90 RCX: 000000000045a639 [ 1317.258872][T24805] RDX: 00000000000000a6 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1317.258872][T24805] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1317.258872][T24805] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7eeeb8d6d4 [ 1317.258872][T24805] R13: 00000000004c6e37 R14: 00000000004de010 R15: 0000000000000004 11:59:20 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) listen(r0, 0x10001) r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000540)=@v2={0x2, @aes128, 0x3, [], "7813f5da7850b42647a7b8341ac5c9c8"}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$inet6(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="d71363ffb447ca350b2396a7b7b49c74f3d43431478c88cbbd528042b4b0fd78e7f8eb97637bf3a299342d6fbea85056e7890b3b7dcac608d2e224ec8d5279df76e0269e5fac3d8df2e1f3123d16945f3a517836d743fc140a021d96c822bf4dc28a7d0733e36c1e049e106cfea06f43e0c87dd3c7d6754bd9426b5b4215974e6905ca38ab34c5f3996cf2d3f13253bb06c5d2ff6869e160c56e5a575c6fb89d04bc034d1d989fce4c14b1de5b06c3888a9cc50d272f87a33b62c183adad191deb3972e161adddffad607af03d6088601e6349faab455e0678b6708bdaa5a6f386afe44409", 0xe5}, {&(0x7f0000000000)="b78259ba6e2248322431850c677e223c789ab642950598f92671af5456962924312dfcde87234d97c01438ddc8bebb83a26368fe3a967c34738053ca46d249f22d00d8276576e42c48d0b1dbccb60e0120d3f3829ed2f5", 0x57}, {&(0x7f0000000200)="6e09e6bbae03031c29d11ededd771f8c894525cd940c861c0b513891e5cf0bb50eebe5a914344423128bd898c2fba07d28003cb4c77a16eac102240cd99e5a182fb6d24dc1f7533fe7dda65c5cab2e7f447e712242b47c7329213e1465fd70f3da62080a79addb0125e958e4c50d86e6cee3f3931d35a6cebb3de50e73a06522a22b", 0x82}, {&(0x7f00000002c0)="c6de9387c5edd09305552bdd837fdff2d55c5cf10466b3645eda67447d9e8e40c66d0138af6e0013b6b8327900bf87401d2d32f1153bffd9057695d0db044e87ef2c77566d24fdd34db8296df2952e8e628c6a75fd8b601df4654ca4284790c99e67de21485c509d69", 0x69}, {&(0x7f0000000340)="90327a786336e0916f781665370cc802bbe81ed083a0ad4fae45376993f41b71270a1c799e0b8e36ac9a49c4b48b828b3e8def03a02f1cc3c205d405d9a43fe655786e74d2", 0x45}, {&(0x7f00000003c0)="c73cd610aaf48b158c7b305760ae445a7fab7562c0286653ac81995593d9782c75301f3cd28c541ea42bafb0359570856737d273a04ee82ab2a6041e84aff897ee0b1832879804ed01c65fb222d4b63bbade54525468e2f66901811943094aeec9db851ffd0b", 0x66}], 0x6, &(0x7f00000004c0)=[@dstopts={{0x38, 0x29, 0x37, {0x3c, 0x4, [], [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x80}, @jumbo, @enc_lim={0x4, 0x1, 0x7f}]}}}], 0x38}, 0x8000800) 11:59:20 executing program 5: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000000c0)={0x0, 0x3, 0x0, &(0x7f0000000080)=0xfffffffffffffffd}) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000200)=""/14) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000140)=0xffff9877, 0x4) tkill(r0, 0x1000000000015) 11:59:20 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={0x0, 0x20}, &(0x7f0000000ac0)=0x8) r6 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r7 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r8, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r9 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r9, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:59:20 executing program 3: syz_emit_ethernet(0xfdef, &(0x7f0000000600)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x2, 0x11, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local={0xfe, 0x80, [0x2]}, {[], @icmpv6=@ndisc_rs}}}}}, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7, 0x800) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000200)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1000, 0x2}) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2}, 0x10) listen(r1, 0x0) r3 = dup3(0xffffffffffffffff, r1, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1ab802, 0x0) readv(r4, &(0x7f0000000880)=[{&(0x7f0000000080)=""/8, 0x8}], 0x1) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f00000002c0)={0x0}) r6 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x200, 0x200000) ioctl$VFIO_IOMMU_MAP_DMA(r6, 0x3b71, &(0x7f00000001c0)={0x20, 0x2, 0x9, 0x80000001, 0x7dad318}) ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f0000000300)={r5, 0x3}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000140)={r5, 0x4, &(0x7f0000000040)=[0x0, 0x129, 0x401, 0x1], &(0x7f0000000080)=[0x40, 0x3], 0x13, 0x1, 0x7, &(0x7f00000000c0)=[0x4af], &(0x7f0000000100)=[0x9, 0x0, 0x0, 0x345, 0x83, 0x168]}) 11:59:20 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3, @tick=0x2}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) sendfile(r3, r3, 0x0, 0x40fdf) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x1000) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000080)={0x3, 0xfffffffffffffffd, 0x54c14316, 0x8}) tkill(r0, 0x1000000000015) r4 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f00000000c0)) 11:59:20 executing program 4: r0 = getpid() r1 = socket$can_raw(0x1d, 0x3, 0x1) read(r1, &(0x7f00000000c0)=""/32, 0xa6) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x3, 0x7, 0x4, 0x0, {}, {0x4, 0x1, 0x4, 0x58, 0x4, 0x8c, "591e5af9"}, 0x8, 0x1, @userptr=0x76c, 0x4}) pwrite64(0xffffffffffffffff, &(0x7f0000000140)="2faf0a4ad5e5ffa3a84be6d75164c228696d166b517d1b24d0f2c312ef7ab4586e5daded986633e6cbb4bd581b9c9459ce8057cf804cad085521ef101f12", 0x3e, 0x8) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="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", 0xfc) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 1318.000689][T24827] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 11:59:21 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={[0x8000a0ffffffff], [], @multicast1}}, 0x1c) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10, 0xc0800) getpeername$tipc(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @empty={[0xe0ffffff]}}, 0x1c) 11:59:21 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000401000000000"], 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000010000105000600200000000a00000000000000000500e50000070000001f0000000000000300000000000002000100f5000000000000020000000005000500000000000a000000000000000000000000000000001700"/128], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000240)=@pptp={0x18, 0x2, {0x2, @loopback}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000380)="a98552f375f136b3e743ce84a9f0826e6bdb4f2167c5dbf8b6dc58b9dcd05c8f5b54f9d2efb3bba9179329f217d59eccacf75b36b53cca3e360016f3f891fdc4f185eafd636ae3b846f6062d9e50a527da67972cafa107da71934f97121fa23d619f8d8591e3a4b45048a294b5e34118a9d5eac613a4a5369af1b5af8f4864df5bb93d3de4511aa0f1aa268aaab92510406454", 0x93}], 0x1, &(0x7f0000000440)=[{0x48, 0x10c, 0x8, "4a12ad2bc123fc0fc3fb61dfab5dae73a2c207e5c78170aa5fd2c6ed895f68145d89c5a4e573f9911aae8100ab2c5f1a35fc3b940247"}, {0x1010, 0x10a, 0x1, "9d49593bbe889cb19a73d55c83d0c714ce551643d550fd75bf9e847a6c2354cd436b42928decc10eababd1e7b1adfe8c868f4ce03651ff9817ef21708921eb8be303787efd457e131c69528bd298612a35aa17644330d079461cbec7dfbcbc4e3819539e1e3aa5fca03662cb81fe5a788573b3b46c656adcbee1a3881d05f9496ff79d3b8cb9216f9bb1f00c19a7c00882e7ca44261c921cb834017e28bab8c5cdfae24e062f8b91bf2d338d4187b90623461996914ca7017df49b33ce0ac9f2e80ad251c6ffc38964d57f7c41b2cfd6163b27686e2751eeea8999491daf6ee7973c721baeeb85daf49a167e39b816f6bcc0211d3943e2708a04eb6b680ad5d20e6058d0373c69157d1926820acae6e22aa1273a136075160fc06db842d8b01607d0ce18c606efdbfa353eabefcf9099277114344a845965920214fc7319637ab1a6df75fc481eec83d680511cef6a4804f6f853f64efaa55ac42287a69861298507537b9157e1d47db4e5777cc0c92ec6be170740e4247ed45c46f67507514ded76a9679caf33ef85ae6312f3f9551bb135d295f16912db4c6c0d80676da193f836a3745bb94684348dd3cd2b1f16ef7a09c4218407457e8a512bf87fc772b66a8e29d1dc8753d4a0ce9ac20e36a1f6a28911acc35a4e5b9c8478bddee03f5467fae0dbb8b6cae5a4cecbb1f2f39a35fa3ce1a9b5a0a1356a3dfff5d9f3f554db0ddbc10ee4696d1a4429fcabcc5ec69ef9201d98d119668a39476bb855dc940eebc42449d65cd7f6ba1d1c2be59ab7fbce513ec325d8b6c88394a6bf4d59563d0de50dc56433da653e2e7416a9159e0fb3ee61b8908e5e3b89be02b6906707925d32b7db920095192f20a6586dac2f7f9b4b29cb8fcda172022f529ad18d0d9a0950a5f401f3d029a543f8a37393d8dd3a56e0b89c484bdea71fed33df85381e29b3d0db707c2e459ff7e018c898d63d109ae6a42c328da0f355b28ae76e4e08cea8e35c2a03e6b5ec1dadf7d93ff7291e429537476412b64356b7c8088011ed3fc59e65e5c9ea0c8c9091649ee9c23c323e06f84ad3831aa54cf36caab8672fdd8ae7d8413161639eca417d92fa199af4a46c0eb6e5e761b678f80675bf47d0704be61d5b5b7e3c0ab6881e882bf3d03653334c9bc446608f033bcb9acd32f46eea002a49ffcc51df01ce5fd54415165e2b1f50a8d5bdde51a9967eeb7b23ff6884269d21a50b78620cc9cc9d7391a8ba98451750a80f5586e8637e0883b4ff4db4112fbb6ac7d6b0ad1e212a6bb57eae3d9a2a4e6785d23ea1b71107ee447ebcaf5328d688cb225ff83cdc9e28892f167da91fd615d6f267269e787af21dde918c2c3e8600b042866ad2735316350d20d6e8c780a8d743fbe392b448272d6ed385df456a36e9c01a554ab11e233146c0d5b60777c01556190cf7ff0532e2f9dfa79abf3fcf0711ed73771382993370f4ff0fee1ebfbcb38f964a08ef4964a7c4c681f4618b86b6fb78862fa86b61d0e21d0e416bb6f702b4c794695edc93edb0120be9168168142b41f52e66cfc76ed517a0a0cb7e6a0a50d4dbc1542a1f23f2203903ba15ef02084d5563ddb21a1d20861cf8b7883045bfcec51ea931817c6ddee11b73279fc972a3134819c07e83518b77370872334a6a576d6b7a81a8c364bb03ff5d28cdc301b2b86026a5fef86d1e68e3b635c355e061aecc43a6bae661cd583b1f6c2e06130e7e0b25aa71b929bb57bb0b2772b271d804a40161b03e5ec5cbeaba51d17c86f4860647210467c5b33e7b8db61590e007892a3657425bf990b12683a605b44efa25c098dc70f293c64bc6f2cd70fa67a0fd5f81d1a20219d75c39f10574a9d03c8d2347e77383ea5afdc9587441ca0db3418fafb959a0968183f30a55c38392462c33532019c62cb70b56bd999b0e611fada0e7cdffa5f9bcf0e1d22de208d491526ebb6dc413c85f2ef0e9a177a57a0154ca2224838a6807a3785336c43afb47ec4d4a9c02b8d0a12b7de0ba872ecdae6fae154bb4ec6e51b6c037d5c3124c38b642af909707ee830cabd41b071e6c9731a4db4aa5667c93bc8a89c2ae2561aa2e4c3fd44f747ea6e5a9e42ec1b5ee768d868fdaa9be6e3beb1326d3fd23608ffa2f0fb6df5f7cf9ef19514023101e3e058df48c9fc11718dc150358d875891ce32852bf8658d8a2af873b5a996ddbec739fb2b5ba017ec004d2c6a30ff66539135175b7dec2d8019fdce2c848708c62f0d64a75564609c99f680042355b1f57645fb3e0ff19764c88fab320abdc908a4631653519f86dc6774b26c4ab8981d8322f391b3ef3a509ab0ea18ee0719e1f9a42b7201589da4953907b6f58721e0130fc3684f566a877480e2f4a38790290b14a2ade89b3cadc8b41fe49ceb370c3ddd57dddba89040ef1813fa1df14e727fa0b6dceb38a272886c6c1c41d0f6cc2fb0e56f568c5ec998b7412ba076df426c8d77dc151bd5360c258d083f8335802bea6470e5efb4ae672f3865a1e687bcdfb75b0b77a441a7ff84d411f0325c3d79e2c33f2850cdf7ffc934bc7adb9d638e927ce0ca6e82630decff36a61ac7b59f79849236fe4bcd67c10f9395580cf69de14b226f63d88a3ec592eb445cf64136838f74fdd1bfa47442d1e15d21563a9819bb6f53cf9a927720ca1b9d4fad7b54ade0ed628adbfb98d691896bf12297f38b401dc1d57cb01439c141638b0ae2b42e1292aa4ffe3d812ac04bc3965265f90dfb58f258be72b6a5264f2cecbbf2ec4046b43a5b66ad53248db9a5730d21d63c4a37c83b446f4efc4ae21a9b4a63a95b57932e27ce955187068386a9710c08c1e33da80d1cd8f12deaad7f503b5e0731374807a215e7edea21258b2c6e2c7b0d4f2fbfacc4c00a7a9c8496c6aa03210ab0648be68c7272bcd68493d70bdf47b7977d95902a09b098655f9ed0f63058429fc1d81258f0bd9c3fdb51f4f2308e08773f3e2dd1fa7eaa2e3f75db610ca99edcb9285723678bd3e9a52c4640d6aa15dc59610f434d65d4885f78a5c3247d2d45b3c4e149b59afae663b26b0e64a55fc94c9d7a76dc38b540c278d244c3cd1ae6bdf9ef6596ade25655d86c4129e018d577f70adc8834012ee391859bc8bbe44c0b5a89bd870261e7310cf5e5505602a39843c127de120580d8723d909044d9de0e27028bdf10390528e9347d3407c4dd68ebbbdc53de593dfc0ab899841bdc2a228402848159e4129e250f894662b9df2fe3344fde9c0ddebe10c2289bf9d2eb1ac84ffdb3e82e64aa85e54929b3d7d7abad2e6904eedec928658aa32b803d26fdf9f459b2c0f1c415d66e1352cdc02eb4ddad4855163aa47f6e97752e1af2795d1ee2dc3919b70fd015fd9830b3f49a545d7a0f22fc6ff5d9d77883bab96d44f4aa3ef743169a81033b061941b6ea0e0012474457a28a318c8e8a20adee39e2003ad947dead4858e62a75c8e2a5184d4611c279a46c40cd9aa2cebd77bd7f8dc349b6af50db05f28c14f7b033e26753afdae52c24a7cc8d7470aa614a0e46e006232fbcc0a4b38efcc994d5841b94e79fe3a3b2a008d17a78b3f41731522a6777a8d9f95d8eaea501925d1e829207252c8b42754b3680234f7ad1026586b96e197b49e1a30329c774311de40ed8441ab3461cbf3ca023108f45c048e2851b7af5c36bb3ba9be5524fc1e696bbfd636acefb06cd5ae0bb9f337601cc2a93f5182656f395363f47603f9bdcb3f03b6a123909e3b2e6a3b64ba696c000b93b7469164ae9fc71dfc2e489b0e347cb7250daea84c448b7eb8bfa1fd42146618446abe6126b47f1f3d265837170baaea65569203e0cc3c688db77cec18b82627181c165ad4539f57845e5e9e0f395579d89c8fec29d04152563657b31d81c2d51281b188124aab71f9e303fef8f0f1699d7837d709a0bf585f58607cf1e58a2aef242e18f493a50826f2742d4f52e074a37926e8285622d5ebd9236872e25ca76ee127fa638c977ad1db12035603168782a51b1daa31803a893f239b1c1ae38d8a64231b5d1ebcf75b55c09c3b2f450b7527456a1afbf9213c9e16cf85b6aa2882795fec18f98173ef349c442ff483ed46324fb6a96d221341e0580f1c468add31684ea88f7979b051860c18befe9b49113100644a3eedb5098fb5a14541ed7f8994ed4deee8709a9af91c08df7740431a2fb89936ac05e3ca851d41af6aed5912fa288131a45ed7d88ab9dcc59cc46670bd62edfac6826656e1fcd6264be5ec4e28e633dc9d01abfb666a0715b29c3176f383d6fc57c4d41412abeca002ced408be7be46c878a93deeebb07d97f0fdbaec4864b3f8ed96915009da11927cdb76d80aec1531d64d335149a72e47621831ca8ded54c26d71342a9231daa6aa3faf582074e19763ccb73780cbce8755c9cdc03625d56871f4a0e02e0ffddaf4567b1eda2d30aafd4e30b8cb73ba16ee0cb9bd44113136cace976232c4a55554dee8428c90354c39d54afb8236aed5c340e1edd9caf7382447ce2597a681d4d27ec00c08e361f86e8ac0a2e8bd30ab101c3b535849eb9c3967b548e307d25a12180949c9428d28910fa5acd7eda0cef6da3fb358ac6bc5f0f993b92f325dcd12f7bad0222108dc2e47f949e7d0a0aa3020bfafcd13378671bb96a9d64ac1c7bcae19c3455a98a7c7702fa6d4ac3f74aec332b9bc15cb1a8ef174a5adad4c000a627f8c41f5a9edfe55ec8739eaddb6fa0a653fd6dd7919470bb098cc7b8f3a64b3405ce30f11ff898d1f746a71b0d9bd441722d5a10eed8cf9b24d3f5fda1739f4cc10a1c56f1fc90453c83303051be23e9e1d7d5ca2a2c85c0bc2ff52a1efd164eadc2cfa5a0abe67ec58927824d6bdccf94a0467334d4fe2794d2544085d1eabe7241f8face2f799fd2a2f6b69862589d14462ba83218a7244a21fe118ab5da833d15229c973b3786b0f0d25f72a88e67b2e3523e95f59c51dab2dc9b2196cd9f0b49dd193f3610601f47abb224771a40acad666d4f7a77ee0e4a40c24cf8228b9fe84abf1be802b5b386a643245cbee51054ce8b56905f428718aefa2ee5a4ff2e531cf2010f7fc7a10336a070846717e55ab2192020453c40c44ac5f8c15beece3a304974933f6b217394dc6b90d8c22788a52d48e4ccade3a232471ddc70ddffee12c697786bad89dfdbce7db14e4d1047565be5cb65a545da2549581f7591698f9928e78e00bad456a2d9a0408133f68c981bcb77bf2928e8a6d2edf166d2519bee5fea70a0729fa08f3db5e16ec7c2d59e4f81ed7988a2b3a2d365deca0a8ab619355707fcb3b1025d9f806a8075587e2836084425adaadc3b27b5bf9713907be7a702324a4c0afd1dcaf755a5eb7da8f8519c83b3f2ba9ab0c9ff4b641a013ae386f33727821c991d4a744dbcd8c123860383b2645643e404cbe445dc5382a57da015668aba0f06f2bbe99b899f35b819d85210a9bb5a95291371a0ff141a086b40dc059fdadbbdcf5569facc56eb9f6da9b18f4da9088620b058357174f77d3230a9c0e7c71a2d6629920a109b78c04bc36e878fb60864b49bce23d9471230a1f43bca292e19e48700b8f9c5c98ed6662bbd57490a479c0f957fec748601277db8146348b66fd003b46dc132d900abacdc38b90cc446959e30b0542d2fd1de2c904b1133b60cd2e4f39189c7abe15f804462dcc7b8e2a62c7b9c96b92e382723c8e1efc2ea37d15e8993928e2bb3d6ef1b7b015ade1e5f3da29ce214172d75a3c68016238594b050492b58e878612ce2169f"}, {0xc0, 0x3d2, 0x3f, "8f37d5e41295b1b8646deca11351b63b94e913d1590f6270c90306474d8b8be1abc18175baba53f3ae241b801b4d8b866b3e355f8991b3450130aeca450c171b82c9c50888c009026edfc927940e37093eee94b34cd3ee4f31ba3e04241f353bbfa1c54ac215810769f263aa80c114e79304bf20dbbefcc36b7edb787a2657ae9c0ea754c69ce0112b59a1172191de9f31c712724455a46696a422631be2ffa23e76283a115bb1b77991321c3c"}, {0x78, 0x109, 0x8, "979b0f847fccbb1ecab0bad043ef40a118ebd3dda34c7bf965e0c7a236d98c1b74f97ead9cf3830aa9d7edccc525b4fa9ec5393684b627f562732e7b62391d9b4e0d7400b92c1280c42978161ac8616568e3f1833dfa350c863d0b1e7ce745e0fdc2"}, {0xf8, 0x10c, 0x4, "646eddc2542a63b3cf4798efa6e2e5a50869f1e2d50f484166f4680964488fc539e33cf60a89e5357aae8ae96a9d2846661def4bc31275d184113097d73ff7086d055d7da9aac6e35275c41e4955c70c0526c7b55be226c1b8137b8e6bd3337268d16b0ca6ccf29e8bd1b098cca51941d7fd8683a72b59bfcbaa2ba17a17f213d6e0cbe55a6efa58bd313fbb46b46e171c76dc84dfd05e1832d535d8d1a807a1a645bf1d6dde371e1affb930a4cbd737895753895788bbd692110dadd2658c737e6f9299e0ba8f1dde4d47b0397bb6195c1037e7b0ab981d2a163feea043d2afbf"}, {0xe0, 0x117, 0xfffffffc, "aefc519cdffcb8244f9fb5500cd08cc4383a14fa3af8e89fbe1c21a02c527b7d0ecf2ee1a8e4840048e9dbb4fdfb9f8168070fc8bba8054d54792af3e965433902522c50e2789e750b529f2aabef223878a2720d58fccfa7b030fe16e5d6c86c2cc052c8617c67cd47adb00d30dd01a5ca0ad73dc7c079ba6380fea6dd059f01faaa0893fbfa84b00dd77bbce498e8cb1a956b22c9980789f287f48054dae235e069aca55faace1a1615adff7cdd677a7ae879b8da32f7e3eed2330899f4e91d6cd568277d64428389ebba"}], 0x1368}}], 0x1, 0x10) sendmsg$key(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="02090000020000000000000000000013"], 0x10}}, 0x0) 11:59:21 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x60082) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000002c0)={r4}) r5 = fcntl$dupfd(r4, 0x406, 0xffffffffffffffff) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000000)={0x100, 0x1000}) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/143, 0x8f}], 0x1) close(r1) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x10000, 0x0) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x3c) ptrace$cont(0x18, r6, 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r5, 0x2287, &(0x7f0000000100)=0x8) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000200)={0x74, 0x0, [0x20, 0x3, 0x7, 0x4]}) ptrace$cont(0x20, r6, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000300)={{0x8, 0x6, 0x1d, 0xfff, '\x00', 0x6bf}, 0x5, 0x517, 0xda, r6, 0x3, 0xff, 'syz1\x00', &(0x7f0000000140)=['/dev/kvm\x00', '(@!eth0systemeth0+\x00', '/dev/kvm\x00'], 0x25, [], [0x4, 0xfffb, 0x3, 0xfff]}) syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') tkill(r0, 0x1000000000016) 11:59:21 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={0x0, 0x20}, &(0x7f0000000ac0)=0x8) r6 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r7 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r8, &(0x7f0000000b00)=ANY=[@ANYBLOB="5c0000007d020000005500f9ff1f000000200100000005000000000000000000a8440000000004000000810000000000000013002c2d76626f786e6574315829766d6e6574312900000500706b6373310a002f6465762f7662692300378157bc95bf615c9a57972cb29214f390a5bedcd489525528e46f545da3015df5c38d9558807b913977619d01bbf9d32b88e6a5c65b3942a1e197b3ce36e757413da13ff2f7cbb9949d5ca8f88c9c7b667033359aa682b56dc43212eeb8b6a64916c0c964efe379fd2624758e331b26e60ace63ce74edf854c2dfb72fe02248be6541ddd0f76b847224d4d74a8a72c06317959044251f53abe327f11939fa8c8234037b6106df5753d1cc7203e1e4bdbee80466165554c43c11056a607a63f8a17d5630e6ea719124494d"], 0x5c) r9 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r9, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") [ 1318.748112][T24827] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 11:59:21 executing program 4: r0 = getpid() r1 = socket$can_raw(0x1d, 0x3, 0x1) read(r1, &(0x7f00000000c0)=""/32, 0xa6) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) getpid() r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) timer_create(0x4, &(0x7f0000000000)={0x0, 0x8, 0x5, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:59:21 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffad, 0xa}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) r2 = gettid() r3 = userfaultfd(0x81800) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r2}) syz_open_procfs(r1, &(0x7f0000000080)='pagemap\x00') 11:59:22 executing program 5: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0xf8e110baaafda5de, 0x0) splice(r2, &(0x7f00000000c0)=0x81, 0xffffffffffffffff, &(0x7f0000000140)=0xa0000, 0x3f8, 0xa) r3 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000380)) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x200002, 0x0) fcntl$setflags(r4, 0x2, 0x3) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:59:22 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x1, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) r2 = dup(r1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000005680)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r3}, 0x10) 11:59:22 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="020000000c000000000000000000000005000000000000000a004b64557d52909bc42232b000000000003f00000000000000000000ffff0000000000000000000f796f0d19f1390600d800020000007f0000010000000000000000220001"], 0x5e}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x403, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_address={0x5, 0x9, 0xfffffffd, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x98}}, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000040)={0xfffffffb, 0x5, 0x3f}) 11:59:22 executing program 4: r0 = getpid() r1 = socket$can_raw(0x1d, 0x3, 0x1) read(r1, &(0x7f00000000c0)=""/32, 0xa6) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0xe0a40, 0x0) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000280)=0xffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r4, 0x4, 0x70bd29, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0xffff3035}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x80) 11:59:23 executing program 2: getpid() r0 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) r3 = clone3(&(0x7f0000000400)={0x81000, &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000280), 0x37, 0x0, &(0x7f00000002c0)=""/90, 0x5a, &(0x7f0000000340)=""/163}, 0x40) tkill(r3, 0x1e) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 11:59:23 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="5c0000007d020000005500f9ff1f000000200100000005000000000000000000a8440000000004000000810000000000000013002c2d76626f786e6574315829766d6e6574312900000500706b6373310a002f6465762f7662692300378157bc95bf615c9a57972cb29214f390a5bedcd489525528e46f545da3015df5c38d9558807b913977619d01bbf9d32b88e6a5c65b3942a1e197b3ce36e757413da13ff2f7cbb9949d5ca8f88c9c7b667033359aa682b56dc43212eeb8b6a64916c0c964efe379fd2624758e331b26e60ace63ce74edf854c2dfb72fe02248be6541ddd0f76b847224d4d74a8a72c06317959044251f53abe327f11939fa8c8234037b6106df5753d1cc7203e1e4bdbee80466165554c43c11056a607a63f8a17d5630e6ea719124494d"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:59:23 executing program 3: r0 = socket$inet6(0xa, 0x80803, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fsync(r0) write$FUSE_IOCTL(r0, 0x0, 0x0) 11:59:23 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x3, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x1ee, &(0x7f00000003c0)=""/251, 0x0, 0x0, [], 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1cf}, 0x48) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={r2, r1, 0xd}, 0xd) 11:59:23 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) fallocate(r0, 0x100000003, 0x804000, 0x28120001) write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x0) 11:59:23 executing program 4: r0 = getpid() r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000000)='net/ip6_tables_targets\x00') r2 = socket$can_raw(0x1d, 0x3, 0x1) read(r2, &(0x7f00000000c0)=""/32, 0xa6) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:59:24 executing program 4: r0 = getpid() r1 = socket$can_raw(0x1d, 0x3, 0x1) read(r1, &(0x7f00000000c0)=""/32, 0xa6) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x41080, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000040)={0x8, [0x3, 0x5, 0x81, 0x2, 0x4, 0x300, 0xfc01, 0xcb8]}, 0x14) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:59:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f000031e000), 0x1c) shutdown(r0, 0x0) 11:59:24 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r1, 0x23f, 0x0, 0x0, {{}, 0x0, 0xb, 0x0, {0x3, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) [ 1321.064064][ C0] net_ratelimit: 18 callbacks suppressed [ 1321.064086][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1321.076304][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:59:24 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000003d9, @tick, 0x0, {}, 0x0, 0x0, 0x6}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:59:24 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="69b327b1e15fe37f07fab1a8dc2e6bc8", 0x10) dup2(r0, r1) 11:59:24 executing program 5: perf_event_open(&(0x7f0000000300)={0x2, 0x69, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) acct(&(0x7f0000000000)='./file0\x00') 11:59:24 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x7a02, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000002f00815be00f80ecdb4cb904074865160800030014000000120000140e003c001500cd5edc2976d153b4", 0x2e}], 0x1}, 0x0) 11:59:24 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") 11:59:24 executing program 5: openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000001c80)='./file0\x00', 0x113d, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x0) open(&(0x7f0000000440)='./file0\x00', 0x110000141842, 0x0) 11:59:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2d, &(0x7f0000000080)="9840a88a0a7dbeb7df05e921e55022e84a0600000000000000b4ffcb105c46114f3214c75f99b2071751a8cd0b130f9c9b623bf9023d35957408d2958c35bfd2a4a4c38c1b7497b73d62954feefe30f0dc9951b5e7ed5b51542dab31abe9957728588f0495de782ee419351d7f8c02d0451d128892d205729d341e7384982859f9027c57667db3e1", 0x88) 11:59:24 executing program 3: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f00000013c0)={"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"}) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 11:59:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004084, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "be337667fd7e61dd", 'D \b\x004\x00', '\x00', "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 1322.001152][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 11:59:25 executing program 4: r0 = getpid() r1 = socket$can_raw(0x1d, 0x3, 0x1) read(r1, &(0x7f00000000c0)=""/32, 0xa6) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) socketpair(0xa, 0x80000, 0x6, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r5, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x84052) write$binfmt_misc(r2, &(0x7f0000000280)={'syz0', "f756eba13623037bb07c63f497a7571afedf82dfc17602b9146891aaeda629af1fcf146491cb0b67021a2f98bdf7b668d7d853a4ba200bfa688757678e819d4dd62ebe1e941e1d4c92ef79d22f07482c4711bddb02e07ffca5e3635923bfd3876d94c210ebc5f234e8346bdab4297ae5f79ed13c3ac8a8367f7b1f0b75ddb727c4a690852bd39597f4ed286f7db8bd0fdb722c33b4d418ba7079e2c78476d17f6f5545dbe421ca0d8c803283c810a6919b84b59b7f7244d0"}, 0xbc) tkill(r0, 0x1000000000015) r6 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000380)={r6, 0x0, 0xfffffffff0000000, 0x7ffeffff00000800}) 11:59:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x353, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 11:59:25 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x8434a0) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r3 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc0a85320, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x0, 'bond0\x00', 0x3}, 0x18) tkill(r0, 0x1000000000015) [ 1322.262880][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1322.269342][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1322.275969][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1322.282272][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1322.288898][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1322.295235][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:59:25 executing program 3: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f00000013c0)={"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"}) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 11:59:25 executing program 1: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000200)="120000001600e70d017b17d473fc00000000", 0xff17, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000700)={0xffff0001, 0x2, 0x4c6, 0x3, 0x2, 0x80000000, 0x1eb, 0x1, 0x9, 0x2, 0xfb, 0x10000, 0x26c, 0x2, &(0x7f0000000540)=""/88, 0x1000, 0x4, 0x80000000}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/122, 0x7a) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x18000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)={0x0, 0x6e, "8a626a96885d6bafde12413c0f6b99fb839c4adec9e98d7e3266c649ce6b6838850d40b18f3ac11d5f3b05c5be9ebcbe01c549fd49ae68dbfed0763bbcce2f699beaa598e83eae672bcdd257b34a87669678198d85ee33ea7cb17d00a1217f99e2236dcef0738dae56377803d6ab"}, &(0x7f0000000a40)=0x76) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000a80)={r6}, &(0x7f0000000ac0)=0x8) r7 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000007c0)={[0x40, 0x2, 0x80000001, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x5f, 0x8, 0x6, 0x1, 0x10000, 0x0, 0x10001], 0x0, 0x200}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "8137fe556a183628", "e31f38aaf0880be0b06433c3b0400264c4597eb38b596ec5433b13e7a309aea0", "b4a2a7e2", "09378579ca0131f4"}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x100e3, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r8 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x74e0, 0x210600) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28400201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$P9_RSTAT(r9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x5c) r10 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000004c0)="2066304e97f85fd27c808c2b08f1ce689a167690caa9d9551d3375cd09f73b0b95f8124bd45c3600395b134fb9c2ce92ade7e7b82d2f2013011ea904c049498fce147784523edcd23372f0593e8800c9f276eb9fa4f2143feb6f5ffacc0c0a48c996a6aed54ac510", 0xfffffffffffffea7, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r10, 0x26, 0x73}, &(0x7f0000000900)=ANY=[@ANYBLOB="656e633d706b63733120686173681d7374726565626f67353132000000000000000000000000000000000000000000000000000000000000000000000000fcff00000000000033bb83909917009e5a01594014e84f7d2bfa06554d34c34e6ba137e8bb91029ebc1ad1a79fa846012bfd3e2cbe5ea6e67c20763a7e209bb07d41c4efb66df2afe7b61a11a6d349ee0ca2"], &(0x7f0000000300)="5e25bc8d4f7df07426a2e37a470228428b3932530dc33a2dcbde28124218128e62514b8674b5", &(0x7f0000000340)="f47eb8b697c10692b3f1735aaa64df8a5bc489a2685623f4396e3c4160d84e0d6801fe931619b4d2c78ad4f17a14fb0f1d3c6f5262ba1c57189ae5e92bbe75e5a8f15accd6b037ca651f5b8d98a61d3d4b70e5c68e6de422c461421ed8e7ac3f9299b41871af5c0c38059dbcdaf08a61462324") [ 1322.925353][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1323.069516][T25542] ===================================================== [ 1323.072324][T25542] BUG: KMSAN: uninit-value in gf128mul_4k_lle+0x1fb/0x2b0 [ 1323.072324][T25542] CPU: 1 PID: 25542 Comm: syz-executor.5 Not tainted 5.4.0-rc5-syzkaller #0 [ 1323.072324][T25542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1323.072324][T25542] Call Trace: [ 1323.102561][T25542] dump_stack+0x191/0x1f0 [ 1323.102561][T25542] kmsan_report+0x128/0x220 [ 1323.102561][T25542] __msan_warning+0x73/0xe0 [ 1323.102561][T25542] gf128mul_4k_lle+0x1fb/0x2b0 [ 1323.102561][T25542] ghash_update+0x9db/0x1130 [ 1323.102561][T25542] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1323.102561][T25542] ? ghash_init+0x50/0x50 [ 1323.102561][T25542] shash_ahash_update+0x53a/0x650 [ 1323.102561][T25542] ? kmsan_get_metadata+0x39/0x350 [ 1323.102561][T25542] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1323.102561][T25542] shash_async_update+0x50/0x60 [ 1323.102561][T25542] ? shash_async_init+0x1e0/0x1e0 [ 1323.102561][T25542] gcm_hash+0x15d8/0x2400 [ 1323.102561][T25542] crypto_gcm_encrypt+0x710/0x9e0 [ 1323.173587][T25542] ? crypto_gcm_setauthsize+0xc0/0xc0 [ 1323.175462][T25542] crypto_aead_encrypt+0xf2/0x180 [ 1323.175462][T25542] tls_push_record+0x341e/0x4e50 [ 1323.175462][T25542] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1323.175462][T25542] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1323.175462][T25542] bpf_exec_tx_verdict+0x1454/0x1c80 [ 1323.175462][T25542] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1323.175462][T25542] ? get_user_pages_fast+0x69b/0x6e0 [ 1323.175462][T25542] ? kmsan_get_metadata+0x39/0x350 [ 1323.175462][T25542] tls_sw_sendmsg+0x158d/0x2710 [ 1323.175462][T25542] ? udpv6_rcv+0x70/0x70 [ 1323.175462][T25542] ? tls_tx_records+0xb40/0xb40 [ 1323.175462][T25542] inet6_sendmsg+0x2d8/0x2e0 [ 1323.175462][T25542] ? inet6_ioctl+0x340/0x340 [ 1323.242565][T25542] __sys_sendto+0x8fc/0xc70 [ 1323.242565][T25542] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1323.242565][T25542] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1323.242565][T25542] ? prepare_exit_to_usermode+0x19a/0x4d0 [ 1323.242565][T25542] __se_sys_sendto+0x107/0x130 [ 1323.242565][T25542] __x64_sys_sendto+0x6e/0x90 [ 1323.242565][T25542] do_syscall_64+0xb6/0x160 [ 1323.242565][T25542] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1323.242565][T25542] RIP: 0033:0x45a639 [ 1323.242565][T25542] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1323.302455][T25542] RSP: 002b:00007f8e1d348c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1323.302455][T25542] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045a639 [ 1323.302455][T25542] RDX: ffffffffffffffc1 RSI: 0000000020000080 RDI: 0000000000000004 [ 1323.302455][T25542] RBP: 000000000075bf20 R08: 0000000000000000 R09: fffffffffffffe5b [ 1323.339282][T25542] R10: 0000000000000040 R11: 0000000000000246 R12: 00007f8e1d3496d4 [ 1323.339282][T25542] R13: 00000000004c8c20 R14: 00000000004df2a0 R15: 00000000ffffffff [ 1323.339282][T25542] [ 1323.339282][T25542] Uninit was stored to memory at: [ 1323.339282][T25542] kmsan_internal_chain_origin+0xbd/0x180 [ 1323.339282][T25542] __msan_chain_origin+0x6b/0xd0 [ 1323.339282][T25542] ghash_update+0xa83/0x1130 [ 1323.339282][T25542] shash_ahash_update+0x53a/0x650 [ 1323.339282][T25542] shash_async_update+0x50/0x60 [ 1323.339282][T25542] gcm_hash+0x15d8/0x2400 [ 1323.339282][T25542] crypto_gcm_encrypt+0x710/0x9e0 [ 1323.339282][T25542] crypto_aead_encrypt+0xf2/0x180 [ 1323.339282][T25542] tls_push_record+0x341e/0x4e50 [ 1323.339282][T25542] bpf_exec_tx_verdict+0x1454/0x1c80 [ 1323.339282][T25542] tls_sw_sendmsg+0x158d/0x2710 [ 1323.339282][T25542] inet6_sendmsg+0x2d8/0x2e0 [ 1323.339282][T25542] __sys_sendto+0x8fc/0xc70 [ 1323.339282][T25542] __se_sys_sendto+0x107/0x130 [ 1323.339282][T25542] __x64_sys_sendto+0x6e/0x90 [ 1323.339282][T25542] do_syscall_64+0xb6/0x160 [ 1323.339282][T25542] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1323.339282][T25542] [ 1323.339282][T25542] Uninit was stored to memory at: [ 1323.339282][T25542] kmsan_internal_chain_origin+0xbd/0x180 [ 1323.339282][T25542] __msan_chain_origin+0x6b/0xd0 [ 1323.339282][T25542] __crypto_xor+0x1e8/0x1470 [ 1323.339282][T25542] crypto_ctr_crypt+0x613/0xaf0 [ 1323.339282][T25542] crypto_skcipher_encrypt+0xd2/0x150 [ 1323.339282][T25542] crypto_gcm_encrypt+0x4a5/0x9e0 [ 1323.339282][T25542] crypto_aead_encrypt+0xf2/0x180 [ 1323.339282][T25542] tls_push_record+0x341e/0x4e50 [ 1323.339282][T25542] bpf_exec_tx_verdict+0x1454/0x1c80 [ 1323.339282][T25542] tls_sw_sendmsg+0x158d/0x2710 [ 1323.339282][T25542] inet6_sendmsg+0x2d8/0x2e0 [ 1323.339282][T25542] __sys_sendto+0x8fc/0xc70 [ 1323.339282][T25542] __se_sys_sendto+0x107/0x130 [ 1323.339282][T25542] __x64_sys_sendto+0x6e/0x90 [ 1323.339282][T25542] do_syscall_64+0xb6/0x160 [ 1323.339282][T25542] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1323.339282][T25542] [ 1323.339282][T25542] Uninit was created at: [ 1323.339282][T25542] kmsan_save_stack_with_flags+0x3f/0x90 [ 1323.339282][T25542] kmsan_alloc_page+0x153/0x360 [ 1323.339282][T25542] __alloc_pages_nodemask+0x149d/0x60c0 [ 1323.339282][T25542] alloc_pages_current+0x68d/0x9a0 [ 1323.339282][T25542] skb_page_frag_refill+0x2b0/0x580 [ 1323.339282][T25542] sk_page_frag_refill+0xa4/0x330 [ 1323.339282][T25542] sk_msg_alloc+0x203/0x1050 [ 1323.339282][T25542] tls_sw_sendmsg+0xb56/0x2710 [ 1323.339282][T25542] inet6_sendmsg+0x2d8/0x2e0 [ 1323.339282][T25542] __sys_sendto+0x8fc/0xc70 [ 1323.339282][T25542] __se_sys_sendto+0x107/0x130 [ 1323.339282][T25542] __x64_sys_sendto+0x6e/0x90 [ 1323.339282][T25542] do_syscall_64+0xb6/0x160 [ 1323.339282][T25542] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1323.339282][T25542] ===================================================== [ 1323.339282][T25542] Disabling lock debugging due to kernel taint [ 1323.339282][T25542] Kernel panic - not syncing: panic_on_warn set ... [ 1323.339282][T25542] CPU: 1 PID: 25542 Comm: syz-executor.5 Tainted: G B 5.4.0-rc5-syzkaller #0 [ 1323.339282][T25542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1323.339282][T25542] Call Trace: [ 1323.339282][T25542] dump_stack+0x191/0x1f0 [ 1323.339282][T25542] panic+0x3c9/0xc1e [ 1323.339282][T25542] kmsan_report+0x215/0x220 [ 1323.339282][T25542] __msan_warning+0x73/0xe0 [ 1323.339282][T25542] gf128mul_4k_lle+0x1fb/0x2b0 [ 1323.339282][T25542] ghash_update+0x9db/0x1130 [ 1323.339282][T25542] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1323.339282][T25542] ? ghash_init+0x50/0x50 [ 1323.339282][T25542] shash_ahash_update+0x53a/0x650 [ 1323.339282][T25542] ? kmsan_get_metadata+0x39/0x350 [ 1323.339282][T25542] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1323.339282][T25542] shash_async_update+0x50/0x60 [ 1323.339282][T25542] ? shash_async_init+0x1e0/0x1e0 [ 1323.339282][T25542] gcm_hash+0x15d8/0x2400 [ 1323.339282][T25542] crypto_gcm_encrypt+0x710/0x9e0 [ 1323.339282][T25542] ? crypto_gcm_setauthsize+0xc0/0xc0 [ 1323.339282][T25542] crypto_aead_encrypt+0xf2/0x180 [ 1323.339282][T25542] tls_push_record+0x341e/0x4e50 [ 1323.339282][T25542] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1323.339282][T25542] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1323.339282][T25542] bpf_exec_tx_verdict+0x1454/0x1c80 [ 1323.339282][T25542] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1323.339282][T25542] ? get_user_pages_fast+0x69b/0x6e0 [ 1323.339282][T25542] ? kmsan_get_metadata+0x39/0x350 [ 1323.339282][T25542] tls_sw_sendmsg+0x158d/0x2710 [ 1323.339282][T25542] ? udpv6_rcv+0x70/0x70 [ 1323.339282][T25542] ? tls_tx_records+0xb40/0xb40 [ 1323.339282][T25542] inet6_sendmsg+0x2d8/0x2e0 [ 1323.339282][T25542] ? inet6_ioctl+0x340/0x340 [ 1323.339282][T25542] __sys_sendto+0x8fc/0xc70 [ 1323.339282][T25542] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1323.339282][T25542] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1323.339282][T25542] ? prepare_exit_to_usermode+0x19a/0x4d0 [ 1323.339282][T25542] __se_sys_sendto+0x107/0x130 [ 1323.339282][T25542] __x64_sys_sendto+0x6e/0x90 [ 1323.339282][T25542] do_syscall_64+0xb6/0x160 [ 1323.339282][T25542] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1323.339282][T25542] RIP: 0033:0x45a639 [ 1323.339282][T25542] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1323.339282][T25542] RSP: 002b:00007f8e1d348c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1323.339282][T25542] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045a639 [ 1323.339282][T25542] RDX: ffffffffffffffc1 RSI: 0000000020000080 RDI: 0000000000000004 [ 1323.339282][T25542] RBP: 000000000075bf20 R08: 0000000000000000 R09: fffffffffffffe5b [ 1323.339282][T25542] R10: 0000000000000040 R11: 0000000000000246 R12: 00007f8e1d3496d4 [ 1323.339282][T25542] R13: 00000000004c8c20 R14: 00000000004df2a0 R15: 00000000ffffffff [ 1323.339282][T25542] ------------[ cut here ]------------ [ 1323.339282][T25542] kernel BUG at mm/kmsan/kmsan.c:470! [ 1323.339282][T25542] invalid opcode: 0000 [#1] SMP [ 1323.339282][T25542] CPU: 1 PID: 25542 Comm: syz-executor.5 Tainted: G B 5.4.0-rc5-syzkaller #0 [ 1323.339282][T25542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1323.339282][T25542] RIP: 0010:kmsan_internal_check_memory+0x477/0x4a0 [ 1323.339282][T25542] Code: 0f 0b 65 8b 35 4e 12 fd 7d 65 48 8b 15 d2 8f fd 7d 48 c7 c7 87 59 20 8f 31 c0 e8 d1 f9 72 ff 0f 0b 0f 0b e8 bb c5 4e ff 0f 0b <0f> 0b 65 8b 35 24 12 fd 7d 65 48 8b 15 a8 8f fd 7d 48 c7 c7 87 59 [ 1323.339282][T25542] RSP: 0018:ffff8881b236ec00 EFLAGS: 00010046 [ 1323.339282][T25542] RAX: 0000000000000002 RBX: 0000000000000000 RCX: 00000000060402f5 [ 1323.339282][T25542] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881b236ecdc [ 1323.339282][T25542] RBP: ffff8881b236eca8 R08: 0000000000000000 R09: ffff88812fd41910 [ 1323.339282][T25542] R10: 00000000ffffffff R11: ffffffff8604ca20 R12: 0000000000000001 [ 1323.339282][T25542] R13: 0000000000000001 R14: 0000000000000006 R15: 00000000060402f5 [ 1323.339282][T25542] FS: 00007f8e1d349700(0000) GS:ffff88812fd00000(0000) knlGS:0000000000000000 [ 1323.339282][T25542] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1323.339282][T25542] CR2: 00007f7eeeb29db8 CR3: 00000001b246d000 CR4: 00000000001426e0 [ 1323.339282][T25542] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1323.339282][T25542] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1323.339282][T25542] Call Trace: [ 1323.339282][T25542] kmsan_check_memory+0xd/0x10 [ 1323.339282][T25542] iowrite8+0x99/0x2e0 [ 1323.339282][T25542] ? pvpanic_mmio_remove+0x60/0x60 [ 1323.339282][T25542] pvpanic_panic_notify+0x46/0x70 [ 1323.339282][T25542] atomic_notifier_call_chain+0x13d/0x240 [ 1323.339282][T25542] panic+0x45a/0xc1e [ 1323.339282][T25542] kmsan_report+0x215/0x220 [ 1323.339282][T25542] __msan_warning+0x73/0xe0 [ 1323.339282][T25542] gf128mul_4k_lle+0x1fb/0x2b0 [ 1323.339282][T25542] ghash_update+0x9db/0x1130 [ 1323.339282][T25542] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1323.339282][T25542] ? ghash_init+0x50/0x50 [ 1323.339282][T25542] shash_ahash_update+0x53a/0x650 [ 1323.339282][T25542] ? kmsan_get_metadata+0x39/0x350 [ 1323.339282][T25542] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1323.339282][T25542] shash_async_update+0x50/0x60 [ 1323.339282][T25542] ? shash_async_init+0x1e0/0x1e0 [ 1323.339282][T25542] gcm_hash+0x15d8/0x2400 [ 1323.339282][T25542] crypto_gcm_encrypt+0x710/0x9e0 [ 1323.339282][T25542] ? crypto_gcm_setauthsize+0xc0/0xc0 [ 1323.339282][T25542] crypto_aead_encrypt+0xf2/0x180 [ 1323.339282][T25542] tls_push_record+0x341e/0x4e50 [ 1323.339282][T25542] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1323.339282][T25542] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1323.339282][T25542] bpf_exec_tx_verdict+0x1454/0x1c80 [ 1323.339282][T25542] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1323.339282][T25542] ? get_user_pages_fast+0x69b/0x6e0 [ 1323.339282][T25542] ? kmsan_get_metadata+0x39/0x350 [ 1323.339282][T25542] tls_sw_sendmsg+0x158d/0x2710 [ 1323.339282][T25542] ? udpv6_rcv+0x70/0x70 [ 1323.339282][T25542] ? tls_tx_records+0xb40/0xb40 [ 1323.339282][T25542] inet6_sendmsg+0x2d8/0x2e0 [ 1323.339282][T25542] ? inet6_ioctl+0x340/0x340 [ 1323.339282][T25542] __sys_sendto+0x8fc/0xc70 [ 1323.339282][T25542] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1323.339282][T25542] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1323.339282][T25542] ? prepare_exit_to_usermode+0x19a/0x4d0 [ 1323.339282][T25542] __se_sys_sendto+0x107/0x130 [ 1323.339282][T25542] __x64_sys_sendto+0x6e/0x90 [ 1323.339282][T25542] do_syscall_64+0xb6/0x160 [ 1323.339282][T25542] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1323.339282][T25542] RIP: 0033:0x45a639 [ 1323.339282][T25542] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1323.339282][T25542] RSP: 002b:00007f8e1d348c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1323.339282][T25542] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045a639 [ 1323.339282][T25542] RDX: ffffffffffffffc1 RSI: 0000000020000080 RDI: 0000000000000004 [ 1323.339282][T25542] RBP: 000000000075bf20 R08: 0000000000000000 R09: fffffffffffffe5b [ 1323.339282][T25542] R10: 0000000000000040 R11: 0000000000000246 R12: 00007f8e1d3496d4 [ 1323.339282][T25542] R13: 00000000004c8c20 R14: 00000000004df2a0 R15: 00000000ffffffff [ 1323.339282][T25542] Modules linked in: [ 1323.339282][T25542] ---[ end trace ee1c268c684469fc ]--- [ 1323.339282][T25542] RIP: 0010:kmsan_internal_check_memory+0x477/0x4a0 [ 1323.339282][T25542] Code: 0f 0b 65 8b 35 4e 12 fd 7d 65 48 8b 15 d2 8f fd 7d 48 c7 c7 87 59 20 8f 31 c0 e8 d1 f9 72 ff 0f 0b 0f 0b e8 bb c5 4e ff 0f 0b <0f> 0b 65 8b 35 24 12 fd 7d 65 48 8b 15 a8 8f fd 7d 48 c7 c7 87 59 [ 1323.339282][T25542] RSP: 0018:ffff8881b236ec00 EFLAGS: 00010046 [ 1323.339282][T25542] RAX: 0000000000000002 RBX: 0000000000000000 RCX: 00000000060402f5 [ 1323.339282][T25542] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881b236ecdc [ 1323.339282][T25542] RBP: ffff8881b236eca8 R08: 0000000000000000 R09: ffff88812fd41910 [ 1323.339282][T25542] R10: 00000000ffffffff R11: ffffffff8604ca20 R12: 0000000000000001 [ 1323.339282][T25542] R13: 0000000000000001 R14: 0000000000000006 R15: 00000000060402f5 [ 1323.339282][T25542] FS: 00007f8e1d349700(0000) GS:ffff88812fd00000(0000) knlGS:0000000000000000 [ 1323.339282][T25542] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1323.339282][T25542] CR2: 00007f7eeeb29db8 CR3: 00000001b246d000 CR4: 00000000001426e0 [ 1323.339282][T25542] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1323.339282][T25542] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1323.339282][T25542] Kernel panic - not syncing: Fatal exception [ 1323.339282][T25542] Kernel Offset: disabled [ 1323.339282][T25542] Rebooting in 86400 seconds..