200000, 0x0) getsockopt$inet_dccp_int(r3, 0x21, 0x11, &(0x7f0000001540), &(0x7f0000001580)=0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$sock(r5, &(0x7f00000014c0)={&(0x7f0000000100)=@xdp={0x2c, 0x2, r6, 0x1b}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000180)="db94b85e79d9e1e02135ab0b8a10e5ea02241096154f9bf81d5cd52f474965947a83de9cc7eebc5ddf48624d1d45b4f013ebb081d6e39843f275e8fe6bc2b2aaa2c345452abbe83668d9aa9ef085c58141f74184835d5af2fd84d83454d3c5077b01785b27667addf60c438952", 0x6d}, {&(0x7f0000000280)="0935eed31b4962ede5c04f72be7ad71407d00b323eadb7e19490751f500d1c9cc1bd2ff70425c5ea26ccbc5efcb30bc6b3b3396c39a27a54ff32eafeb06245f1ead0a212c0b7ef5daca88d1ca1ded6b9", 0x50}, {&(0x7f0000000300)="ba2fa62782e37921f7fd8b8202a61a91989eb2b2a4390ce9a1c00cfcdab6eae37f2c8a8d320fa127e6018f41d46d56c11f6557e1aa30bd35ec7ce7d5e05773a99034a3e9d49f928700ee84f244e1cfa4e6c8a349b243110a1755cb458e13203b5896676230380f987f511d7a5a4b1191ca8f3935e7a59ae9a36f0ad4a8c1dc5212cd406761b6bbc201d85e53ab1a8b0f1f2b2648f9bd947e79c3c687b5d2efe8b746088e6c99e493d39ff4d6b7f0d7d02211248f84c890d8ff677f75b103e5", 0xbf}, {&(0x7f00000003c0)="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", 0x1000}], 0x4, &(0x7f0000001400)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x7fffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0xc0}, 0x20010) dup3(r4, r2, 0x0) [ 460.202948][ T8591] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x89, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, 0x0, 0x0) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:22:18 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\xf0\xff\xff\xff', 0x48, 0x0) [ 460.400879][ T8601] overlayfs: unrecognized mount option "loweö®¢ãÕ-]=.:f" or missing value [ 460.411591][ T8606] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:18 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x7}}, 0x0) ioctl$TCGETX(0xffffffffffffffff, 0x5432, &(0x7f0000000000)) 05:22:18 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0xffffffffa0010000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 460.500409][ T8601] overlayfs: unrecognized mount option "./file0" or missing value 05:22:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x8a, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, 0x0, 0x0) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:22:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x2245065, 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x7) dup3(r3, r2, 0x0) [ 460.689195][ T8728] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:18 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x02\x00\x00\x00', 0x48, 0x0) 05:22:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x8b, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:18 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:18 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x7}}, 0x0) 05:22:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0), 0x0) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:22:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000100)={0x6, 0x1, @start={0xfffffffffffffff8, 0x2}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x8000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x2) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f00000000000000723d2e3a66696c6530"]) r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r4, 0x0) [ 460.970766][ T8857] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:19 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0), 0x0) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:22:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x8c, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:19 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:19 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x7}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r5, &(0x7f0000000380)) ioctl$LOOP_SET_FD(r3, 0x4c00, r5) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r4, r6, 0x0, 0x8000) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000240)=0x10) sendfile(r2, r3, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x26db585e, 0x10}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000180)={r7}, 0x8) 05:22:19 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x04\x00\x00\x00', 0x48, 0x0) [ 461.227985][ T8999] overlayfs: unrecognized mount option "" or missing value [ 461.250997][ T9015] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:19 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0), 0x0) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) [ 461.328451][ T9021] overlayfs: unrecognized mount option "./file0" or missing value 05:22:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x8d, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:19 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x7d, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:19 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{0x0}], 0x1) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:22:19 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\'\x00\x00\x00', 0x48, 0x0) [ 461.613544][ T9137] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x8e, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:19 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 461.665143][ T9212] netlink: 'syz-executor.0': attribute type 9 has an invalid length. 05:22:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x7b, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:19 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{0x0}], 0x1) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:22:19 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x7}}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x200000) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x18) [ 461.843615][ T9258] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:20 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\xf0\x00\x00\x00', 0x48, 0x0) [ 461.942589][ T9287] netlink: 'syz-executor.0': attribute type 9 has an invalid length. 05:22:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x8f, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{0x0}], 0x1) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:22:20 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x79, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x0, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:22:20 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) r2 = socket(0x4, 0x3, 0x4) r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0) syncfs(r3) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) listen(r2, 0x4) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000440)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, r4}, 0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000000c0)={r6}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000005c0)={r6, @in={{0x2, 0x4e24}}, 0x2, 0x7fff, 0x3, 0x8e1e, 0xe66}, &(0x7f0000000680)=0x98) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) r9 = creat(&(0x7f0000000240)='./bus\x00', 0x0) syncfs(r9) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000440)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, r10}, 0x4) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r11, 0x84, 0x1, &(0x7f00000000c0)={r12}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r9, 0x84, 0xf, &(0x7f00000005c0)={r12, @in={{0x2, 0x4e24}}, 0x2, 0x7fff, 0x3, 0x8e1e, 0xe66}, &(0x7f0000000680)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r12, 0x40, 0x30}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000280)=@sack_info={r12, 0x4625, 0x2}, &(0x7f00000002c0)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r6, 0x40, 0x30}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000180)={r6, @in={{0x2, 0x4e21, @multicast2}}, 0x6, 0xfff}, 0x90) r13 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x990c0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r13, 0x112, 0xa, &(0x7f0000000140)=0x1, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x7}}, 0x0) 05:22:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x90, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:20 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x65, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:20 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\xa0\x01\x00\x00', 0x48, 0x0) 05:22:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x0, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:22:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x91, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x65, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x0, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:22:20 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:20 executing program 2: lookup_dcookie(0xfffffffffffffffb, &(0x7f0000000180)=""/45, 0x2d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000000)=@ethtool_cmd={0x37, 0x1, 0x9, 0x8, 0x9, 0x2, 0x100000001, 0x1, 0x7fffffff, 0x20, 0x6, 0x6, 0x800, 0x1, 0x9, 0x6, [0x9, 0x80000001]}}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x7}}, 0x0) 05:22:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x92, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:20 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00 \x00\x00', 0x48, 0x0) 05:22:20 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\xa0\x01\x00\x00', 0x48, 0x0) 05:22:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, 0x0, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:22:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x93, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:21 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000000380)) readv(r2, &(0x7f0000000400)=[{&(0x7f0000000140)=""/214, 0xd6}, {&(0x7f0000000240)=""/218, 0xda}, {&(0x7f0000000000)=""/49, 0x31}, {&(0x7f0000000380)=""/68, 0x44}], 0x4) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x7}}, 0x0) 05:22:21 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x10}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, 0x0, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:22:21 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\'\x00\x00', 0x48, 0x0) [ 463.171952][ T9753] overlayfs: overlapping lowerdir path 05:22:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x94, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, 0x0, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:22:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x93, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:21 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x8000) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x200, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x800) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) 05:22:21 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x18}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:21 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00@\x00\x00', 0x48, 0x0) 05:22:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x95, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000), &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:22:21 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x01\xa0\x00\x00', 0x48, 0x0) 05:22:21 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x9, 0x0, @tid=r2}, &(0x7f0000000300)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x7}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 05:22:21 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x48}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x96, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:21 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\xf0\x00\x00', 0x48, 0x0) [ 463.901118][T10009] overlayfs: overlapping lowerdir path 05:22:22 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000140)) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x7}}, 0x0) 05:22:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x97, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:22 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00 \x00', 0x48, 0x0) 05:22:22 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x4c}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000000380)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f00000003c0)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) lstat(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r12, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r13) fsetxattr$system_posix_acl(r1, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x4}, [{0x2, 0x7, r2}, {0x2, 0x7, r4}, {0x2, 0xd}, {0x2, 0xd9e06dd4eb8a22ff, 0xffffffffffffffff}, {0x2, 0xb, r5}, {0x2, 0x0, r6}, {0x2, 0x2, r8}, {0x2, 0x7, r10}, {0x2, 0x1, r11}], {0x4, 0x1}, [{0x8, 0x4, r13}], {}, {0x20, 0x7}}, 0x74, 0x2) r14 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r15 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r16, r15, 0x0) 05:22:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x98, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000), &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:22:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000000380)) r2 = fcntl$dupfd(r1, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2c6c6f7704726469066121b1afbb65ffda8a0b31a6f54df1b074b12c1258d427dac329a71acb92585d31703077f7dc3b68687861bf2e89129263f390c29256712e1a8ac4b51dfdc98fbec4009dca8dc896b4690c466d2a9de15e8c65e93861e6ac889107a0a3c5ff807d45e43c0000003f34503f9ff6c80500"/148]) r3 = socket$inet_sctp(0x2, 0x1, 0x84) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x100, 0x0) fdatasync(r6) dup3(r5, r4, 0x0) 05:22:22 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\xff\xff\xf0\x00', 0x48, 0x0) 05:22:22 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x68}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x99, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:22 executing program 0: r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) write(r0, &(0x7f0000000280)="90", 0x1) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x12, r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x8000) statx(r3, &(0x7f0000000000)='./bus\x00', 0x800, 0x900, &(0x7f0000000040)) readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x3b6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x3) [ 464.629681][ T26] audit: type=1804 audit(1567920142.656:1200): pid=10264 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir440465884/syzkaller.OX1K3m/214/bus" dev="sda1" ino=16610 res=1 05:22:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000000380)) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file0\x00', 0x91) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet_int(r3, 0x0, 0x15, &(0x7f0000000100)=0x5, 0x4) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x1030021, &(0x7f0000000040)=ANY=[]) r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r4, 0x0) 05:22:22 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x01', 0x48, 0x0) 05:22:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x9a, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:22 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x6c}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 464.741732][T10273] overlayfs: unrecognized mount option "lowrdia!±¯»eÿÚŠ 1¦õMñ°t±" or missing value 05:22:22 executing program 2: r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) write(r0, &(0x7f0000000280)="90", 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x580, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000000, 0x110, r3, 0x10000000) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r4, 0x0, 0x8000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140), r8, 0x0, 0x3, 0x400000}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000080)={0x6, 0x118, 0xfa00, {{0x11c, 0x7, "ed125c4b5593c14d32b0bbbdf0bbbfc21b79152e8b631a9189971c9c7f3377ebd620b5a072cc29825775abc2df1211522f4594edc624c7ea8554f310cdf082cab39d8f0161e3311e2714f2e7994f37fc713717ae77ccf9a49e04d3638435751db2bd96caaa7badc8d32e7b93473042599eb63266450d0930a31512a59fec141c105e3bc0d446fcaa8c477268e4527dcb545798dbdee63351f193893d40a42227d03d2d1666094fe6114b8103ff494486131c077124dc2c4eb42ddfc621cfa9367b067ae6b5437b57e6d8497ad27a7d9d690352862c2bb985b7c37fe69b0518638b3daef4eee82a55d80523e9fd99612caf65a0d4a710a101862a81347e3c5b8a", 0x8a, 0x20000000000000, 0x7, 0x80, 0x80000000000000, 0x3, 0x375d, 0x1}, r8}}, 0x120) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f0000000000)=0x4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x12, r1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x3b6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x3) 05:22:23 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x02', 0x48, 0x0) [ 465.070976][ T26] audit: type=1804 audit(1567920143.096:1201): pid=10494 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir088246239/syzkaller.WvNmZf/450/bus" dev="sda1" ino=16673 res=1 [ 465.164905][ T26] audit: type=1804 audit(1567920143.186:1202): pid=10494 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir088246239/syzkaller.WvNmZf/450/bus" dev="sda1" ino=16673 res=1 05:22:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000), &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:22:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x9b, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:23 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x74}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:23 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000380)) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x10084, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000200)={{0x4, 0x10000}, 0x0, 0x1000, 0x101, {0xffffffffffffff64, 0x2}, 0x800}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x8000) openat$cgroup_ro(r3, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r4, r5, 0x0, 0x8000) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r7 = accept(r6, 0x0, &(0x7f0000000000)) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000009c0)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000ac0)=0xe8) sendmsg$nl_route_sched(r7, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@gettfilter={0x2c, 0x2e, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, r8, {0xffe0}, {0xf, 0xfff1}, {0x7}}, [{0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8508000b}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x68, 0x24, 0x300, 0x70bd27, 0x25dfdbfe, {0x0, r8, {0x7, 0xffff}, {0xfff2, 0xd}, {0x5, 0x4}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x98c3}, @qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x34, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x20}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x3}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x9}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xaf21}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x8}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0xebd4786f08853c4e) r9 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r9, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r10, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/13, 0xffffffffffffff6b}], 0xa74dffaa1ccc546) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x7}}, 0x0) 05:22:23 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x04', 0x48, 0x0) 05:22:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x16, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) [ 465.489403][T10504] validate_nla: 28 callbacks suppressed [ 465.489429][T10504] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:23 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\'', 0x48, 0x0) 05:22:23 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x7a}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 465.579742][T10510] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 05:22:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x9c, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xd, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:23 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00@', 0x48, 0x0) 05:22:23 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x98}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 465.835443][T10675] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 465.873284][T10705] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:22:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xd, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x9d, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:24 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x12a}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:24 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x01\xa0', 0x48, 0x0) 05:22:24 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000380)) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x10084, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000200)={{0x4, 0x10000}, 0x0, 0x1000, 0x101, {0xffffffffffffff64, 0x2}, 0x800}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x8000) openat$cgroup_ro(r3, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r4, r5, 0x0, 0x8000) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r7 = accept(r6, 0x0, &(0x7f0000000000)) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000009c0)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000ac0)=0xe8) sendmsg$nl_route_sched(r7, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@gettfilter={0x2c, 0x2e, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, r8, {0xffe0}, {0xf, 0xfff1}, {0x7}}, [{0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8508000b}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x68, 0x24, 0x300, 0x70bd27, 0x25dfdbfe, {0x0, r8, {0x7, 0xffff}, {0xfff2, 0xd}, {0x5, 0x4}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x98c3}, @qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x34, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x20}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x9}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x3}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x9}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xaf21}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x8}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0xebd4786f08853c4e) r9 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r9, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r10, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/13, 0xffffffffffffff6b}], 0xa74dffaa1ccc546) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x7}}, 0x0) [ 466.393563][T10864] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 05:22:24 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\xff\xff\xff\xeb', 0x48, 0x0) [ 466.450470][T10865] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:24 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x1a0}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x9e, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:24 executing program 2: r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) write(r0, &(0x7f0000000280)="90", 0x1) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x12, r0, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x3b6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x8000) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000000)=0x8001, &(0x7f0000000040)=0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r4, r5, 0x0, 0x8000) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r5, 0x80045700, &(0x7f0000000080)) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x3) 05:22:24 executing program 0: r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) write(r0, &(0x7f0000000280)="90", 0x1) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x12, r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x8000) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r5 = accept(r4, 0x0, &(0x7f0000000000)) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000009c0)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000ac0)=0xe8) sendmsg$nl_route_sched(r5, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@gettfilter={0x2c, 0x2e, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, r6, {0xffe0}, {0xf, 0xfff1}, {0x7}}, [{0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x5, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0x8}, @ldst={0x3, 0x3, 0x0, 0x7, 0x3, 0x0, 0xffffffffffffffff}, @generic={0x81, 0x4, 0x4, 0x0, 0x9}, @map={0x18, 0x1, 0x1, 0x0, r3}], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x3, [], r6, 0x7, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0x6, 0xfffffffffffffff8, 0x989}, 0x10}, 0x70) readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x3b6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000000)={0x8, 0x8, 0x3, 0x725b, 0x13, 0x9, 0x4, 0x6, 0x5, 0x6}) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x3) [ 466.669649][T10981] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:24 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\xff\xff\xff\xf6', 0x48, 0x0) [ 466.745663][ T26] audit: type=1804 audit(1567920144.766:1203): pid=11014 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir440465884/syzkaller.OX1K3m/218/bus" dev="sda1" ino=17089 res=1 [ 466.846804][ T26] audit: type=1804 audit(1567920144.766:1204): pid=11028 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir088246239/syzkaller.WvNmZf/454/bus" dev="sda1" ino=17105 res=1 05:22:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:22:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x9f, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:25 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x300}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:25 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x319) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x8000) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth0_to_team\x00', 0x10) bind$llc(r0, &(0x7f0000000400)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @random="44f7c6c1fb19"}, 0x10) sendfile(r0, r0, &(0x7f0000000000), 0x200) 05:22:25 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\xff\xff\xff\xfe', 0x48, 0x0) 05:22:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x27b}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x8000) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f0000000140)={0x4, 0x0, [], {0x0, @bt={0x1359, 0x5, 0x2, 0x1, 0x8000, 0x3, 0x0, 0x100, 0xadd5, 0x2, 0xac, 0xfff, 0x9, 0x3, 0x1}}}) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000100)=0x4, 0x3b) connect$inet(r1, &(0x7f0000000380)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") r5 = semget$private(0x0, 0x207, 0x0) semctl$SETALL(r5, 0x0, 0xd, &(0x7f0000000040)) semctl$SEM_STAT(r5, 0x2, 0x12, &(0x7f0000000000)=""/43) [ 467.278666][T11115] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:25 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0xfffffffffffffffd, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000ac0)) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) [ 467.327992][T11163] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xa0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:25 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x500}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:25 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\xf0\xff\xff', 0x48, 0x0) [ 467.475558][T11235] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 467.546003][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 467.546049][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 467.551801][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 467.564731][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 467.570606][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 467.576416][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 467.582228][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 467.588017][ C0] protocol 88fb is buggy, dev hsr_slave_1 05:22:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xa1, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:25 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xb) r1 = syz_open_dev$media(&(0x7f0000000500)='/dev/media#\x00', 0x8000, 0x4000) setsockopt$inet_dccp_int(r1, 0x21, 0x6, &(0x7f0000000540)=0x41f, 0x4) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r3, &(0x7f0000000380)) fstat(r3, &(0x7f0000000380)) r4 = dup(r2) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x3, @default, @bpq0='bpq0\x00', 0x6, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default]}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/snapshot\x00', 0x8002, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000580)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x02\x00\x00\r', 0x1000}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='[proc\x00', r8}, 0x10) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') readahead(r4, 0x7, 0x85a) sendfile(r6, r9, 0x0, 0x8000) ioctl$sock_bt_cmtp_CMTPCONNADD(r5, 0x400443c8, &(0x7f0000001600)={r9, 0x56ac}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) r10 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x20000, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000800}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x34, r11, 0x400, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x9, 0x4, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x22000000) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f00000000c0)=""/76, &(0x7f0000000140)=0x4c) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x48000, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 05:22:26 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:22:26 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x600}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xa2, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:26 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\xeb\xff\xff\xff', 0x48, 0x0) 05:22:26 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000300)=0x80, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) r0 = open(&(0x7f0000000000)='./file0\x00', 0x82040, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000140)=""/8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x82040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) syz_init_net_socket$ax25(0x3, 0x5, 0xcb) 05:22:26 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x8, 0x0, 0xffffff80, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x38}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x8000) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000000)=""/96) 05:22:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xa3, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x8000) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x1, 0x1, &(0x7f0000000080)=""/60, &(0x7f0000000400)=""/34, &(0x7f0000000340)=""/38, 0x1}) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000000000002007b9e000000b6bc000000335464f7000000002e04b27d577f742000000000000000a20153814569670300e5ffff25fdda34cdecd9fc46a8b70ea7f71800d5495e424bdf4aa00fb521666cf37dc25f5e930c9df7d37646ea1501007209ca1e82b542029a2f0b4fb5b5b49a7e9b9d3c4e0925888d81ef5a9a8fdcde2720d3cee7cb8bf37b74b2b78fea4ae35b61b98031202a990965dd052024ec590500000000050000c56e14fca1995f1760ab9e23e44c358e5b2561fd80dc1916d1758af90e2beb634b6f1973c0"]) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r5, &(0x7f0000000380)) ioctl$int_in(r5, 0x5421, &(0x7f0000000000)=0xe3d) dup2(r0, r1) 05:22:26 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\xf6\xff\xff\xff', 0x48, 0x0) 05:22:26 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x700}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xa4, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:26 executing program 2: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl(r0, 0x80000001, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f00000000c0)=0xe8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000340)=0xe8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r9, r10, 0x0, 0x8000) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r12 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r12, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r13) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r14, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r15) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {0x1, 0x2}, [{0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x0, r1}, {0x2, 0x1, r3}, {0x2, 0x2, r5}, {0x2, 0x2, r7}, {0x2, 0x1, r8}], {0x4, 0x4}, [{0x8, 0x1, r11}, {0x8, 0x5, r13}, {0x8, 0x288ea50ae7ac91b8, r15}], {0x10, 0x4}, {0x20, 0x2}}, 0x6c, 0x2) 05:22:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:22:27 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = dup(r0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flistxattr(r1, 0x0, 0x0) 05:22:27 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0xa00}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:27 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x1f, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x400, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f00000000c0)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$UFFDIO_COPY(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f00001de000/0x3000)=nil, &(0x7f00006f6000/0x1000)=nil, 0x3000}) 05:22:27 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\xfe\xff\xff\xff', 0x48, 0x0) 05:22:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xa5, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xa6, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:27 executing program 2: prctl$PR_SET_THP_DISABLE(0x29, 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2, 0x4081031, 0xffffffffffffffff, 0x4) 05:22:27 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\xff\xff\xff\xff', 0x48, 0x0) 05:22:27 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000000380)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)="bbed95ff2a6ece3027b3aa118aba1df6dfbeb722e1747f61be6f5ab747d3c31c6c7ee7070812ccf5", 0x28, r2}, 0x68) dup2(r1, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r4, r5, 0x0, 0x8000) getsockname(r5, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000080)=0x80) r7 = dup2(r6, r3) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r8, r9, 0x0, 0x8000) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r10, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendto$inet(r10, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r11 = accept(r10, 0x0, &(0x7f0000000000)) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm_plock\x00', 0x54001, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r13 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r12, r13, 0x0, 0x8000) getsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f00000009c0)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0xd021430fff129c74) sendmsg$nl_route_sched(r11, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000b40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000002e78bc9a2ed2d76b2a9e0011d3320000d1cd6919da8b3e38f634e926c9a22a46155488518888185c7ef3a317ff686cd6b47aeefc898905273f", @ANYRES32=r14, @ANYBLOB="e0ff00000f00f1ff0700000008000b0003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) ioctl$sock_inet6_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000000100)={@empty, 0x72, r14}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) poll(&(0x7f0000000140)=[{r0}, {r7}], 0x2, 0x0) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r15, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r16 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r15, r16, 0x0, 0x8000) ioctl$KVM_SET_LAPIC(r16, 0x4400ae8f, &(0x7f00000004c0)={"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"}) 05:22:27 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x1800}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xa7, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:22:27 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\xfe\xff\xff\xff', 0x48, 0x0) 05:22:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x2e, &(0x7f0000000000)=""/74, &(0x7f0000000080)=0x4a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x8000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x0, @mcast1, 0x2}}, 0x0, 0x68, 0x1, 0x2}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={r3, 0xfffffffffffffffd, 0x20}, &(0x7f0000000280)=0xc) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) 05:22:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xa8, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:27 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:22:27 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x2000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:28 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:22:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xa9, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:28 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x2a01}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:28 executing program 2: r0 = socket(0x10, 0x2, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000000)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xfffffffffffff05e, 0x4, &(0x7f0000000200)=[{&(0x7f0000000180)="2e945607ffb9140e5822228146b57d765b5d3a22f6c6b811f1cab1236d47c512f1e712d232073a4761d5cb4745c7e48958e11676f70d9780e69eaa6c9072184e4414a5c0045ead5c73515e1c789b7acfb950a233f1d86993bd4e05f54082d5eb98be8f4b77891c289fc442b140067de2", 0x70, 0x1}, {&(0x7f00000002c0)="778d583f0ed093a0d99cb44bb27e947c45eb17e611509a5e749e054ad88192bc6ec49f3707c4576ae7f787a411f25849a906702994b65c64a609f3cbe18186e59e2bc5abf3ccb158887666abccd248db55cc13ea79a6e06c4072b0792a126e05742e4bc029a15b1141250d656bb9ce00bdab0dae2a5e62936a27c00bb06802ffe22157d857a04837fbe8fb3c8f12ad366d2b5ea83fed84943c011406f52880cbdc7ebb554e8481db27327745e9b3d31ea3075d200d3a116f332565e4bb968ad08a6686bf2adb338c78fa6b54735c50fd01", 0xd1, 0x1106}, {&(0x7f00000003c0)="0b7a424538c7e0b4492ea14540a9700386416a5c293f63f7a63ca7baa56e806ce809c32f4fc459a47856e972b8ae810102d42d7775ea9a5b13e4088386b6755d6c0159d1efa3785e0b72de44a65180a737fef80a0b1850a1f1774e66837976cff84adafc57e8e9194704edd729b42e35cf7c99d28d373cd54729153ba8d33c2d29c3a7e219b9b63d6ff8a9a1fa8abff878bb97c12bc647bd3454532da19d8a9b766f8cbe0f6004340d5ceeaaf44745f173d42201472dba6c6289b9fce6770b6e53bf79d0dcaa3f8f6b8ca89e939bb10e7306d1cfc10ac79aeb0995b07d", 0xdd, 0x8001}, {&(0x7f00000004c0)="86534236271d315555ff834109fe5ecc739516d212d88bc2aeda91ad730208c34fd11be0f6210be0aa6eddc58e509d5bea61fafeac17a09ee392f94df97b4ef3f08665ed01baac8d81539eef430a912590a1e9403b72ca9ac5f8f9106cad5d139406ec85fd57c89b5b3562cbaeb545410294d6a7edadfdf6f4b3990f688bc85a1d46e2734d3afe4108c2468166039c1c2a9a594d82d088", 0x97, 0x5}], 0x80000, &(0x7f0000000580)={[], [{@fowner_gt={'fowner>', r1}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-cpusetselinuxmime_typeppp1nodevkeyring'}}, {@dont_appraise='dont_appraise'}, {@obj_user={'obj_user', 0x3d, 'user)'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@smackfshat={'smackfshat'}}]}) setresuid(0x0, r1, 0x0) request_key(&(0x7f0000000140)='rxrpc_s\x00', &(0x7f0000000280)={'\x00', 0x3}, &(0x7f0000000100)='rxrpc_s\x00', 0xfffffffffffffffd) 05:22:28 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xf72, 0x20400) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x8000) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000280)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x8000}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r4, 0x0, 0x8000) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000100)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe8) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev={[], 0x13}}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x84, 0x800000ec2, 0x4000000000002}, 0x3c) bpf$MAP_CREATE(0x2, &(0x7f0000000080)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x29) bpf$MAP_CREATE(0x2, &(0x7f00000000c0)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x1}, 0x2c) 05:22:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xaa, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:28 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:22:28 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\xff\xff\xff\xff', 0x48, 0x0) 05:22:28 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x4000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:28 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380), 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)='.\x00\x00\x00>\x00', 0x6}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x4, &(0x7f0000000040), 0x4) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8984413869d6e3ae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002386d120"], 0xfdef) r3 = socket(0x10, 0x800000000000002, 0x0) write(r3, &(0x7f0000000100)="220000002100070477d000000900070102000003000000007dff000305001380010042b2a458d51ebb1e1f3b9f15f9135d40ff4d7f6b9a2ea28887551899d8ff315f00e8c6f5532083f7e1bbfdf4abdcc625990688c3539a98a066af7548cc8f8eccda0446cd4bef85837b78010e20a264b647df4ce4d3a567cae3bff4e25a57060000000000000089996b04531dc2e30e9247f94146ffc509c21a91eb7dcd49fc4ede15f7eb70c0e400f067451d65766f04cbb1f7915dd574cea868a6a514120000000000", 0x6a288702ab3403a3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r4, r5, 0x0, 0x8000) setsockopt$inet6_MRT6_DEL_MFC(r5, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7}, {0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, [], 0x13}, 0x5}, 0x0, [0x2a1, 0xffffffff, 0x10001, 0x8, 0xed, 0x8, 0x0, 0xfffffffffffffffc]}, 0x5c) 05:22:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xab, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:28 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000100)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x8000) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000000)) 05:22:28 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) [ 470.835245][T12125] validate_nla: 19 callbacks suppressed [ 470.835267][T12125] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:29 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x4800}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:29 executing program 0: r0 = socket$inet6(0xa, 0x100000000000002, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @rand_addr="db235f54af56b15298079ad01cc2822d"}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d6f0bcf6c7bf070") r2 = socket$inet6(0xa, 0x1200000002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x581, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0xfffffffffffffdad) setsockopt$inet6_int(r2, 0x29, 0x100000031, &(0x7f0000000140)=0x8, 0xfd73) recvmsg(r2, &(0x7f00000000c0)={0x0, 0xfffffffffffffe14, 0x0, 0x0, &(0x7f0000000040)=""/36, 0x24}, 0x2002) sendmmsg(r0, &(0x7f00000000c0), 0x182, 0x0) 05:22:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xac, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:29 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f00000000c0)='\x00', &(0x7f0000000100)="c70733c7b81e5fb6fb09899e267fe76b866421e016a17c59f2a9da82989f863a4954634e7dcf6265a5a369aa978916b597c6bb", 0x33) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0xea000, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r3 = socket(0xa, 0x80000, 0x3) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.controllers\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000200)=@ccm_128={{0x5e49d6a7decdadd3}, "823b217f8dda4699", "c1b6f99eafc239933fcfb80f87dbd5f7", "5b7b51de", "11ff82a133896f45"}, 0x28) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000140)=0xb, 0x4) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r5, &(0x7f0000000380)) write(r5, &(0x7f0000000180)="2000000012005f3414f9f4070000000002000000000000000000000001000000", 0x20) 05:22:29 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) [ 471.133488][T12276] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 471.176724][T12297] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, 0x0, 0x0) 05:22:29 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000140)=""/69) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000040)={0x22, 0x3, 0x0, {0x2, 0x1, 0x0, '}'}}, 0x22) 05:22:29 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x4c00}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xad, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:29 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) syz_open_dev$vbi(0x0, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @empty, 0x0, 0x0, 'lc\x00', 0x4}, 0x2c) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000040)) dup3(r1, r1, 0x80000) socket$inet6_udplite(0xa, 0x2, 0x88) 05:22:29 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) [ 471.733452][T12383] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 471.777687][T12403] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:29 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:22:29 executing program 0: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="2400000025007f000000000000007701000000ff0100000001000000ffffffff0100ff10", 0x24) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x8000) r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0) syncfs(r3) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000440)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, r4}, 0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000000c0)={r6}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000005c0)={r6, @in={{0x2, 0x4e24}}, 0x2, 0x7fff, 0x3, 0x8e1e, 0xe66}, &(0x7f0000000680)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r6, 0x40, 0x30}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={r6, @in={{0x2, 0x4e21}}, 0x3, 0x1058, 0x2, 0x2, 0x101}, &(0x7f0000000180)=0x98) 05:22:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xae, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:29 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x6800}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 472.045199][T12506] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:30 executing program 0: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x810000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0xe158ffaabea676ff, &(0x7f0000000040)={{0x77359400}, {r1, r2+30000000}}, 0x0) tkill(r0, 0x1000000000016) exit(0x0) 05:22:30 executing program 2: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) listen(r0, 0x9) fstat(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f0000000080)=[{&(0x7f0000000100)="d1897d96cd101b918f01f21495e69713ffeec30805366cf93cb0aa67482ac93d305bad2e66a1c62e6c27a9bd2fe91ec4bd18a2a55b4e2935d28cce4dba5ce53629aa10beff2f854230aaca0581bfe9bb44bf7acfa5a3b65f422a21c1195c58f27c04ff21018c090a14bc0014397fc0377964eff9fe51332a9e4eaebf64cb75c7506c3de437cf6b1e2423e9ddfd314f935256c60d23c52a313c48e741e489be13c7f59d532cbccc", 0xa7, 0x9}, {&(0x7f00000001c0)="246b3c66294f849aa8cb24035268d716af53e938acae021fc53a49c0cecdf874ed644584fb5c3c51e953707a445c008a6ea800daa233b6d2d1993bba21fb19143bb0bb12bdba826ec3707696d370902aa54e9f1fb93e236acbe11b4df9d99c1596e729670d2f01cfc016f76f2b19b1e8351e36889a8b1f0b78866f0f0b768770c818a7af61245c0c3ad9d9c89d2d0bd0bf4a4cba5e3903825b72992fc2aa27b87966", 0xa2, 0x200}], 0x400, &(0x7f0000000300)={[{@fat=@check_relaxed='check=relaxed'}, {@dots='dots'}, {@fat=@check_strict='check=strict'}, {@fat=@sys_immutable='sys_immutable'}, {@dots='dots'}, {@dots='dots'}], [{@permit_directio='permit_directio'}, {@measure='measure'}, {@fowner_eq={'fowner', 0x3d, r1}}, {@smackfshat={'smackfshat'}}, {@dont_hash='dont_hash'}, {@context={'context', 0x3d, 'sysadm_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x65, 0x33, 0x33, 0x33, 0x34, 0x63, 0x34], 0x2d, [0x62, 0x32, 0x0, 0x33], 0x2d, [0x61, 0x64, 0x35], 0x2d, [0x0, 0x66, 0x34, 0x58bee9ca9af4ec5b], 0x2d, [0x36, 0x63, 0x61, 0x61, 0x62, 0x39, 0x33, 0x39]}}}]}) [ 472.310059][T12620] FAT-fs (loop2): Unrecognized mount option "permit_directio" or missing value [ 472.400481][T12627] FAT-fs (loop2): Unrecognized mount option "permit_directio" or missing value 05:22:30 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, 0x0, 0x0) 05:22:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xaf, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:30 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:22:30 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x6c00}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:30 executing program 2: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) listen(r0, 0x9) fstat(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f0000000080)=[{&(0x7f0000000100)="d1897d96cd101b918f01f21495e69713ffeec30805366cf93cb0aa67482ac93d305bad2e66a1c62e6c27a9bd2fe91ec4bd18a2a55b4e2935d28cce4dba5ce53629aa10beff2f854230aaca0581bfe9bb44bf7acfa5a3b65f422a21c1195c58f27c04ff21018c090a14bc0014397fc0377964eff9fe51332a9e4eaebf64cb75c7506c3de437cf6b1e2423e9ddfd314f935256c60d23c52a313c48e741e489be13c7f59d532cbccc", 0xa7, 0x9}, {&(0x7f00000001c0)="246b3c66294f849aa8cb24035268d716af53e938acae021fc53a49c0cecdf874ed644584fb5c3c51e953707a445c008a6ea800daa233b6d2d1993bba21fb19143bb0bb12bdba826ec3707696d370902aa54e9f1fb93e236acbe11b4df9d99c1596e729670d2f01cfc016f76f2b19b1e8351e36889a8b1f0b78866f0f0b768770c818a7af61245c0c3ad9d9c89d2d0bd0bf4a4cba5e3903825b72992fc2aa27b87966", 0xa2, 0x200}], 0x400, &(0x7f0000000300)={[{@fat=@check_relaxed='check=relaxed'}, {@dots='dots'}, {@fat=@check_strict='check=strict'}, {@fat=@sys_immutable='sys_immutable'}, {@dots='dots'}, {@dots='dots'}], [{@permit_directio='permit_directio'}, {@measure='measure'}, {@fowner_eq={'fowner', 0x3d, r1}}, {@smackfshat={'smackfshat'}}, {@dont_hash='dont_hash'}, {@context={'context', 0x3d, 'sysadm_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x65, 0x33, 0x33, 0x33, 0x34, 0x63, 0x34], 0x2d, [0x62, 0x32, 0x0, 0x33], 0x2d, [0x61, 0x64, 0x35], 0x2d, [0x0, 0x66, 0x34, 0x58bee9ca9af4ec5b], 0x2d, [0x36, 0x63, 0x61, 0x61, 0x62, 0x39, 0x33, 0x39]}}}]}) [ 472.625320][T12641] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:30 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) [ 472.685690][T12700] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xb0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) [ 472.737854][T12638] FAT-fs (loop2): Unrecognized mount option "permit_directio" or missing value 05:22:30 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x7400}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 472.830647][T12756] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:30 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:22:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xb1, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) [ 473.048452][T12880] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r2, r0, r1, 0x0) io_setup(0x8, 0x0) 05:22:33 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x8000) accept4$nfc_llcp(r2, &(0x7f0000000080), &(0x7f0000000000)=0x60, 0x100800) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x1f, 0x0, 0x0, 0x5}, 0x10) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x1000) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) recvmmsg(r0, &(0x7f00000001c0), 0x1cf, 0x0, 0x0) 05:22:33 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x7a00}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:33 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:22:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xb2, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:33 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, 0x0, 0x0) 05:22:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xb3, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:33 executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000200)='\x81\x85o\x00\x02\x00\x00\x00\x00\xe2\xff', 0x858, 0x240000) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000100)=0x3, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x20000000, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r3, r0}}, 0x18) 05:22:33 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:22:33 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x9800}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:33 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:22:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xb4, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:33 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x01\xa0', 0x48, 0x0) [ 475.656859][T13065] overlayfs: overlapping lowerdir path 05:22:34 executing program 2 (fault-call:5 fault-nth:0): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:22:34 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0xff00}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:34 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:22:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xb5, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:34 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\xf0\xff\xff', 0x48, 0x0) 05:22:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xb4, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) [ 476.292244][T13144] validate_nla: 6 callbacks suppressed [ 476.292272][T13144] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:34 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0xff0f}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 476.353630][T13150] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 476.367973][T13147] overlayfs: overlapping lowerdir path 05:22:34 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x02\x00\x00', 0x48, 0x0) 05:22:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xb6, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:34 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\xf0\xff\xff', 0x48, 0x0) 05:22:34 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:22:34 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) [ 476.660355][T13312] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:34 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\xf0\xff\xff', 0x48, 0x0) 05:22:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xb7, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:34 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x04\x00\x00', 0x48, 0x0) 05:22:34 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x200000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 476.756356][T13380] overlayfs: overlapping lowerdir path 05:22:34 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x6, 0x18041) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000140)={0x0, 0x4, 0x5}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r2, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:22:34 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) [ 476.958117][T13390] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xb8, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:35 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x8000) getpeername$llc(r2, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x10) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, &(0x7f0000000100)) r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000200)=""/169, &(0x7f0000000140)=0xa9) 05:22:35 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x290000, 0x0) write$P9_RWALK(r2, &(0x7f0000000140)={0x23, 0x6f, 0x1, {0x2, [{0x90, 0x1}, {0xc0, 0x1, 0x5}]}}, 0x23) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:22:35 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\'\x00\x00', 0x48, 0x0) [ 477.193265][T13511] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:35 executing program 0: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="8a468f1b395b8871a633bf550a0b4e9bf8", 0x11, 0xfffffffffffffff9) keyctl$assume_authority(0x10, r0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000580)=[{{&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/96, 0x60}, {&(0x7f00000001c0)=""/97, 0x61}, {&(0x7f0000000240)=""/156, 0x9c}, {&(0x7f0000000300)=""/65, 0x41}], 0x4}, 0x100000000}, {{&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000540)=[{&(0x7f0000000440)=""/252, 0xfc}], 0x1}, 0x3}], 0x2, 0x12002, &(0x7f0000000640)={r1, r2+30000000}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000680)={0x0, 0xe, "9074ce710d16eda03927f5ba580b"}, &(0x7f00000006c0)=0x16) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000740)={r4, 0x1c, &(0x7f0000000700)=[@in6={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xffffffffffffff7f}]}, &(0x7f0000000780)=0x10) connect$bt_rfcomm(r3, &(0x7f00000007c0)={0x1f, {0x40, 0x80, 0x7, 0x401, 0x1, 0x7ff}, 0x10000}, 0xa) semget$private(0x0, 0x5, 0x41) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000800)='/dev/dlm_plock\x00', 0x8001, 0x0) openat$cgroup_int(r5, &(0x7f0000000840)='cpuset.cpu_exclusive\x00', 0x2, 0x0) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000880)='/proc/capi/capi20\x00', 0x800400, 0x0) ioctl$KVM_GET_PIT2(r6, 0x8070ae9f, &(0x7f00000008c0)) prctl$PR_SVE_GET_VL(0x33, 0x1c03) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000940)='/proc/capi/capi20ncci\x00', 0xc4001, 0x0) sendmsg$unix(r7, &(0x7f0000000f00)={&(0x7f0000000980)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000a00)="1a69c5400717944453b0ebf6b1b5d8b2de89e77790dba5924d6bdab7ac7e939d3ce3b2d8f76b4a7295e59f1fb132b4a88c9d089b8704a3bb20115cb8b11b0529eb060cb523c0c12fa4b05ce1bb27d2c3d04cd0e827d66d45d9928d038b65259a86288ddd20e36b9742cf1f8cecff56dccfe624508833007094e33c1ca7e376aaab5c8ebb1d07b3d1f72fa59d920ecb3887b3dd412b722dcfc0e4c989b7bb8613", 0xa0}, {&(0x7f0000000ac0)="95decacc0a27cc5747fb5a04d3c2b1a9f7158999c94399ecf9463070672e371b29525f565810ad8e7b3b6c00a5c77ec62bd8c9b90faa52f422dd5a5b97fe39db965701d9b84ec002b376f7fb7e3b0564816ddb95dbfd1201b7c42c4abcbaf0e9bef96606a6df9266d812248a0facb09ccf39c4560855ddf77a12ea11612385bda6cd9be7f32d45eb2f614d29c81ce759ea66e8f38bd2b1cd823b4547e0099bc86a9f18a05d45624fb683d541df56e320f4358369c52c6a0fc1da8a96d47f110440e390f88ef3cdde3db66378e9e9a150172dcbb4eceddac83bb2", 0xda}, {&(0x7f0000000bc0)="519d57316676d33a978a9e9428eab08c27e121c878b75b91d68c25683607991d7d8a6123de934b6f75ecd1a0f2c2a18f543d8e28296b77a4caf8c99e57a7137d2c8b93e9503d8dcd2387df45c267ba332201c228f5cc16d0f901690a0d7fb2391b4c06a4879724c1106781a8767a6762ea347eeb5a5f2330f494d4d27a03c478ee35425132b3d71d9893754bda2ae1a756705198c9006dff9785c44a0c0f7d0d42852a0a895adc1a2d5f49a8cb3743f5f6485eb0534b96cefa4496373677f57c32485a5d72566f376072726a38a9b6fa1a3eaa5d3b982989fe14d837db32755c491c23280cc9c8", 0xe7}, {&(0x7f0000000cc0)="61c076b23d755d6689951c882246face848bbb4a00b4cd", 0x17}, {&(0x7f0000000d00)="82783e49d28dfa796d67a09a845939de350a32f44bf4434faf2d149b933496448839e70041326ee18f09cb696a4d7288f94cd9240103ef5c06185d28b8e11baf0c9502b974e985b6", 0x48}, {&(0x7f0000000d80)="e36350db1b1c50ad22b15fa486293912668fb0bcdf30a89d0d009e9efb18d8b739edf88e3116b566e4a6daf13964fd8d6349c4c95cb527694bfc4cdbcf2d7fd78629982c57dbcc7c1ab6848dbc7c4b9110df729aa4f820587eac2500ffb70db5458c09b002d3426a866d2281260327ce412ed2dfb6b22d03e48ffdf70d2f31f5308197", 0x83}, {&(0x7f0000000e40)="08316c4961293697836570eb04fda3c3423f081b64eceb5b6541220de5ec5cec62d21e996e9273ab871360fa1a0d5630037c508be5fde5d8", 0x38}], 0x7, 0x0, 0x0, 0x800}, 0x8000004) shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) syz_open_dev$vcsn(&(0x7f0000000f40)='/dev/vcs#\x00', 0x5, 0x80000) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000f80)={0x1, 0x1, @raw_data=[0xffffffffffff0000, 0x27, 0x6, 0x7, 0x7fff, 0x2, 0xfffffffffffff08e, 0x1, 0x5, 0x3, 0x2, 0xbf1, 0xffffffffffffffff, 0x0, 0x4, 0xff]}) r8 = syz_open_dev$sndpcmc(&(0x7f0000001000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffff8, 0x80000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000001040)={0x0, 0x3}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f00000010c0)={r9, 0xfffffffffffffffe}, &(0x7f0000001100)=0x8) pipe2(&(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc800) getsockopt$inet_sctp_SCTP_INITMSG(r10, 0x84, 0x2, &(0x7f0000001180), &(0x7f00000011c0)=0x8) syz_open_dev$video4linux(&(0x7f0000001200)='/dev/v4l-subdev#\x00', 0x3, 0xa0480) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000001240)='/proc/capi/capi20\x00', 0x400040, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f00000012c0)={{{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@initdev}}, &(0x7f00000013c0)=0xe8) getgroups(0x8, &(0x7f0000001400)=[0xee00, 0xffffffffffffffff, 0xee01, 0xee01, 0x0, 0xee00, 0x0, 0xffffffffffffffff]) chown(&(0x7f0000001280)='./file0\x00', r11, r12) r13 = openat$zero(0xffffffffffffff9c, &(0x7f0000001440)='/dev/zero\x00', 0x2000, 0x0) ioctl$KVM_IRQ_LINE(r13, 0x4008ae61, &(0x7f0000001480)={0xfffffffffffffffc, 0xfffffffffffffffe}) 05:22:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xb9, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:35 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x8000) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0x6) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:22:35 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x2000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 477.498011][T13634] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:35 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\xf0\x00\x00', 0x48, 0x0) 05:22:35 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x473, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc00100000000a000400053582c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) 05:22:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xba, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) [ 477.567984][T13639] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 477.725266][T13697] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xbb, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:35 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r0, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000140)) 05:22:35 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x3000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 477.810403][T13758] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 477.843114][T13758] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 05:22:35 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\xa0\x01\x00', 0x48, 0x0) 05:22:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xbc, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:36 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00 \x00', 0x48, 0x0) 05:22:36 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x4000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xbd, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:36 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) io_submit(0x0, 0x6, &(0x7f0000000b40)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0xda, r1, 0x0, 0x0, 0x2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f00000002c0)}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xbd, r3, &(0x7f0000000380), 0x0, 0x200, 0x0, 0x2, r2}, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x3, 0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x401, 0x0, 0x1}]) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x6c, r5, 0x821, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @initdev, 0x9}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}]}, 0x6c}}, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1, 0x712800) r7 = creat(&(0x7f0000000240)='./bus\x00', 0x0) syncfs(r7) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000440)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, r8}, 0x4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f00000000c0)={r10}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f00000005c0)={r10, @in={{0x2, 0x4e24}}, 0x2, 0x7fff, 0x3, 0x8e1e, 0xe66}, &(0x7f0000000680)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r10, 0x40, 0x30}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r10, 0x10000}, &(0x7f00000000c0)=0x8) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xfffffffffffffffd}, 0x1c) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 05:22:36 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\'\x00', 0x48, 0x0) 05:22:36 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x5000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xbe, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) [ 478.682893][T14005] Started in network mode [ 478.717323][T14005] Own node identity fe88, cluster identity 4711 [ 478.725414][T14005] Enabling of bearer rejected, failed to enable media 05:22:36 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x6000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xbf, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) [ 478.861091][T14118] Enabling of bearer rejected, failed to enable media 05:22:37 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00@\x00', 0x48, 0x0) 05:22:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xc0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:37 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x7000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:37 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) io_submit(0x0, 0x6, &(0x7f0000000b40)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0xda, r1, 0x0, 0x0, 0x2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f00000002c0)}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xbd, r3, &(0x7f0000000380), 0x0, 0x200, 0x0, 0x2, r2}, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x3, 0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x401, 0x0, 0x1}]) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x6c, r5, 0x821, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @initdev, 0x9}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}]}, 0x6c}}, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1, 0x712800) r7 = creat(&(0x7f0000000240)='./bus\x00', 0x0) syncfs(r7) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000440)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, r8}, 0x4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f00000000c0)={r10}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f00000005c0)={r10, @in={{0x2, 0x4e24}}, 0x2, 0x7fff, 0x3, 0x8e1e, 0xe66}, &(0x7f0000000680)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r10, 0x40, 0x30}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r10, 0x10000}, &(0x7f00000000c0)=0x8) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xfffffffffffffffd}, 0x1c) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 479.252401][T14245] Enabling of bearer rejected, failed to enable media 05:22:37 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\xf0\x00', 0x48, 0x0) 05:22:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xc1, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:37 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0xa000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xc2, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xc3, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:37 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00 ', 0x48, 0x0) 05:22:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xc0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:37 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x10000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:37 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r0, r1, 0x0, 0x8000) accept$ax25(r1, 0x0, &(0x7f0000000000)) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0x40085112, &(0x7f0000000240)={{0xffffff92}, {0xffffffd0}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 05:22:37 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x2861c3, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x22740793e38cf260, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffffffffffd}, 0xfffffffffffffdd3, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0x1f, 0x0, &(0x7f00000006c0)="b9ff0300000d698cb89e40f088a8d50188ca00de0500000077fb7f11c72be9", 0x0, 0x100}, 0x28) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000001680)=ANY=[@ANYBLOB="9feb010018000000000000002ffffff317000000030000000a0000000000000b030000000f0000000000e20b05000000fcff00000000000901000000060000000000000700000000026100fbb594a904a36bbd8249f7f1b1de84c97c2e3484da2cb3a0d690f77e8d8886cc540a7de972a481def39dbb1399fc19b930b31d8df4e142375de22aaa3e5cc1daa48ee953e3f7c559f323e8"], &(0x7f0000000600)=""/181, 0x96, 0xb5, 0x1}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffff9c, 0xc0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=0x8}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b40)={r3, 0xb, &(0x7f0000000ac0)={&(0x7f0000000900)=""/167, 0xa7, r4}}, 0x13a) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r4, 0x4) 05:22:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xc4, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:38 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x18000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:38 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\xff\xff\xf0', 0x48, 0x0) 05:22:38 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = request_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='\x00', 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, r2) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000180)="cd", 0xfffffffffffffdc1, r3) keyctl$instantiate_iov(0x14, r1, &(0x7f00000001c0)=[{&(0x7f0000000140)="3b5a1da1d5966205b17fb10b794d6b4cfc3d5e652f0e39ffeb50301c5f236b", 0x1f}], 0x1, r3) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000140081ae00002c000500018703546fabca1b4e165a307db89c40ebb3f7ffffffffffffffb4e921556b3d5df5000000000000000000", 0x39}], 0x1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r5, 0x80085617, &(0x7f00000002c0)) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r4, r6, 0x0, 0x8000) ioctl$KIOCSOUND(r6, 0x4b2f, 0xf90) 05:22:38 executing program 0: rt_sigprocmask(0x0, &(0x7f00000000c0)={0x1}, 0x0, 0xffffffffffffff7b) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r0, r1, 0x0, 0x8000) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000080)={0x200000003, 'syz0\x00'}) r2 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x8000) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f0000000100)) ioctl$SG_EMULATED_HOST(r2, 0xc0347c03, &(0x7f00000000c0)) 05:22:38 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x2a010000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xc5, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:38 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:22:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100022b0509000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f00000032c0)=[{&(0x7f0000000080)="55014c0ba50bc1d1a0f7c35e2ca2f5affcbf130d955139395a34df060efcfcd5f4c62a56608aa2358c4ea691055ab484cf878a563feaa636f234dea21cbfdba88fa0c913cbdd87ed38e1a94eb4df95c4e556f3d69dff0fe5", 0x58}, {&(0x7f0000000100)="c6c1cc2421d4010762eb2564cb2d0c0de4297f3d95c075329e3cc5bda079c22f98cf61fa2d3fcf6dc26d95", 0x2b}, {&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="107208332d3be56c97be76308a2f4c8712f24856d0024a027075dad389cd890d5facea07449f5752b44ba977833d3f48afb1ede2e519a225a00d223a18b1b02906cca525c36a16d42f18549312da721e6b628447df1c9fa04f3d0f1ccf908b11e8431251bf26cd08ad4f467cdab4279dc1bd86afe71f5a3f9bc14d1a97f903afc13c5e3f2e2e6b0f348b39ba7bf6db8615ae313666dfe8484d7db1703cc60b96a489d998d2c87fcb959f3bd30eb5e607e8d29e69cc17c5a902", 0xb9}, {&(0x7f0000001200)="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", 0x1000}, {&(0x7f0000002200)="28ebc9dbac5609a24ffcad0e29e9710676e2e8561af9ca386e753cbe7916ba73bc4ea40800"/51, 0x33}, {&(0x7f0000002240)="c93b5aba60779dfb4c68b4e9a7a77a4041d0307a36f3234395628aa3c87054a6549e0a132cb3fd6f0ad05c7be8357c6701dca12344e17fdfb4d67b0996de6696485628ddc5966a353f012c4c7e13197e36eb3e20630268570b05285e3a74854a14", 0x61}, {&(0x7f00000022c0)="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", 0x1000}], 0x8) 05:22:38 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x40000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xc6, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:38 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:22:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x100000000011, 0x2, 0x0) bind(r0, &(0x7f00000002c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b767950000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x5a) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000b59a8fb8f06d9208faef9e6a77aaae6581d8b92a342df9b6d00ce8be24d9136c121c931eac7f0150635602328661cf4ae2fe0fca3e55010c2a5443638f9f10eeb64d814ca84572ab9ce869c71df47928b86e45f2982884002eb3b3a59a0b0c85742630801921a40fbeda6bd4352ac70fee3761fd42d07f7562acd08408ece21d88e3342708aaade3dbc388078c48269aea8fa5dc0a90197695394874da34263277457ccd809e2044fee07a509e853ce5df48594a760a44cf80e3dd8ea3808fb16774707616e66d4e2bb9d861b6e66c1307d09ad3ad74a4047cd96bc464ead6"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r1 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000080)=""/195, 0x23}], 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000340)={0x0, 0x0, 0x6dbb, 0x80000001}) sendfile(r2, r3, 0x0, 0x8000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x1, 0x4, 0x5}) write$binfmt_elf32(r1, &(0x7f0000000480)=ANY=[], 0xf5) 05:22:38 executing program 5: setitimer(0x0, &(0x7f0000000040)={{0x0, 0x7530}, {0x306e000000000000}}, 0x0) setitimer(0x2, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000380)) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L+', 0x9}, 0x28, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x8000) connect$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x3, @multicast2}}, 0x2531ff7216c7438b) 05:22:38 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x48000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xc7, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) [ 480.838059][T14967] syz-executor.5 calls setitimer() with new_value NULL pointer. Misfeature support will be removed 05:22:38 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:22:39 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x4c000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xc8, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:39 executing program 0: syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x8038550a, &(0x7f0000000000)={0x80000001, 0x80, 0xffffffffffffffd, 0x10001, 0x8, 0x7ff0bdbe}) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) 05:22:39 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r0, r1, 0x0, 0x8000) setsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x3, &(0x7f0000c91000)=ANY=[@ANYBLOB="85000000150000008400000000000029b600950000000000"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x333, &(0x7f000000d000)=""/153}, 0x3e) 05:22:39 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:22:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r0, r1, 0x0, 0x8000) r2 = getpid() tkill(r2, 0x1000000000013) r3 = getpgrp(r2) write$cgroup_pid(r1, &(0x7f0000000080)=r3, 0x12) r4 = socket(0x10, 0x802, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001000090468fe07002b00000001000a0224000000450001070300001419001a00150003000e00010003000300"/57, 0x39}], 0x1) 05:22:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xc9, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:39 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x68000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 481.416326][T15217] validate_nla: 25 callbacks suppressed [ 481.416349][T15217] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c00f5a1994b6d83e1686eb8bbca68e6e19732de45d09e9e531d7955f8666285870e221f1743ddf2d63afc6c02dbe247c1ce6accbe7f88e6a77d192abc739441b4cbc4c84e2a20a95a3219b8af21fd91d866863d098fd71581fa0100d97907d950aef3a05cd7c26418ebc868b75df07afa0db66fc6221a4df07efe22985985295a5f71d5eb21c100"/165]) 05:22:39 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:22:39 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x6c000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xca, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) [ 481.673823][T15324] FAT-fs (loop5): bogus number of reserved sectors [ 481.680981][T15324] FAT-fs (loop5): Can't find a valid FAT filesystem 05:22:39 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x01', 0x48, 0x0) [ 481.776346][T15358] FAT-fs (loop5): bogus number of reserved sectors [ 481.804086][T15376] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 481.808052][T15358] FAT-fs (loop5): Can't find a valid FAT filesystem 05:22:39 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x74000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xcb, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) [ 482.109905][T15514] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:40 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\xff\xff\xff', 0x48, 0x0) 05:22:40 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x7a000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:42 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x100000000000008e) close(r2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000040)=0x6, 0x4) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 05:22:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xcc, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:42 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x85ffffff}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:42 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\xff\xff\xff', 0x48, 0x0) 05:22:42 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x8000) r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0) syncfs(r3) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000440)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, r4}, 0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000180)=""/2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="016648cb", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000000c0)={r6}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000005c0)={r6, @in={{0x2, 0x4e24}}, 0x2, 0x7fff, 0x3, 0x8e1e, 0xe66}, &(0x7f0000000680)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r6, 0x40, 0x30}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000000)={r6, @in6={{0xa, 0x4e21, 0x100000000, @ipv4={[], [], @loopback}, 0x2}}, 0x1e0, 0x2, 0xffffffff00000001, 0x2}, &(0x7f0000000100)=0x98) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 05:22:42 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x8000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r4, r5, 0x0, 0x8000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, r5}) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x1) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) [ 484.332373][T15675] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:42 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\xff\xff\xff', 0x48, 0x0) 05:22:42 executing program 0: r0 = gettid() r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3, 0x92080) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000040)={0x9, 0xa1f3fd242d289ea8, 0x467, 0x0, 'syz1\x00', 0x2}) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7213}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgget(0x3, 0x400) r2 = syz_open_dev$cec(0x0, 0x0, 0x2) r3 = getpid() tkill(r3, 0x1000000000013) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') mkdirat(r4, &(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x6, 0x70, 0x9, 0x3, 0x8, 0x3, 0x0, 0x1, 0x1000, 0x7, 0x4, 0x9, 0x3, 0x5, 0x3, 0x7, 0x20, 0x6, 0x6, 0x3, 0x3, 0x40, 0x904, 0x100000000, 0x1, 0xfffffffffffffffe, 0x62ef, 0x0, 0x2, 0x2, 0xffff, 0x4, 0x5, 0x7f, 0xffffffffffffff01, 0x7, 0xa000, 0x8, 0x0, 0x101, 0x2, @perf_bp={&(0x7f0000000100)}, 0x548, 0x3f, 0xfffffffffffffff8, 0x1, 0x400, 0x401, 0x401}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x190100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000180)) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000140)={0x1, r0}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pread64(r5, &(0x7f0000000280)=""/71, 0x1a, 0x0) shmget(0x0, 0x4000, 0xa04, &(0x7f0000ffc000/0x4000)=nil) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_LOCK(r8, 0x4008642a, &(0x7f0000000480)={r9, 0x8}) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x3ff, 0x0, 0x26}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f0000000300)={0x100000001, 0x1000, 0x100000000, 0x0, 0x0, [], [], [], 0x0, 0x100}) 05:22:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xcd, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:42 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x98000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:42 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x8000) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000000)={0x4, r3}) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r4, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19, 0x4dc4c94495758ee7}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:22:42 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\xf0\xff', 0x48, 0x0) [ 484.684289][T15801] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:42 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0xa0010000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:42 executing program 5: r0 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/d\x00', 0x10000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x8000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r4, r5, 0x0, 0x8000) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000100)={0x1, 0xfffffffffffffff9, 0x6, 0x4e, 0x80000001, 0x5, 0x626}, 0xc) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r6, r7, 0x0, 0x8000) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r7, 0x29, 0x0, &(0x7f0000000380)={@local, r8}, 0x14) r9 = getpid() tkill(r9, 0x1000000000013) ptrace$poke(0x5, r9, &(0x7f00000002c0), 0x7) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=ANY=[], 0x0, r1) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 05:22:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xce, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:43 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\xeb\xff\xff', 0x48, 0x0) 05:22:43 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0xff000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 484.984615][T15972] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 485.015209][T16025] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xcf, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:43 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\xf6\xff\xff', 0x48, 0x0) [ 485.201094][T16092] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 485.235088][T16138] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:45 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x0, 0xffffffffffffff2e, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x8000) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000240)=""/219) write$cgroup_pid(r1, &(0x7f0000000200), 0x100000051) 05:22:45 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0xff0f0000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xd0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:45 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\xfe\xff\xff', 0x48, 0x0) 05:22:45 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x80cc81, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x8000) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000000200)=""/77) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000140)=0x44a7, 0x4) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000180), &(0x7f00000001c0)=0x8) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:22:45 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\xff\xff\xff', 0x48, 0x0) [ 487.650594][T16166] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 487.681260][T16227] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:46 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x5, 0x202000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x5c, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x358}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1b, 0x54}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x2, 0x9, 0x74}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10004000}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) 05:22:46 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0xffffff85}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:46 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) r3 = epoll_create1(0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000)=0x3f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r3, &(0x7f0000000040)=[{}], 0x1, 0x20000000200000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r4, r5, 0x0, 0x8000) ioctl$PPPIOCGUNIT(r5, 0x80047456, &(0x7f0000000080)) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdeb}}], 0x3fffffffffffd33, 0x0, 0x0) 05:22:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xd1, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:46 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x103000, 0x0) write$P9_RRENAME(r1, &(0x7f0000000140)={0x7, 0x15, 0x2}, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x8000) r5 = creat(&(0x7f0000000240)='./bus\x00', 0x0) syncfs(r5) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000440)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, r6}, 0x4) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f00000000c0)={r8}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f00000005c0)={r8, @in={{0x2, 0x4e24}}, 0x2, 0x7fff, 0x3, 0x8e1e, 0xe66}, &(0x7f0000000680)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r8, 0x40, 0x30}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000180)={r8, 0x1}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000200)={r9, 0xd11, 0x0, 0x8, 0x9}, &(0x7f0000000240)=0x18) readv(r2, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:22:46 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) [ 488.114632][T16281] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:46 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:22:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xd2, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0xfff, 0x4) sendto$inet(r1, 0x0, 0x0, 0x200481e6, &(0x7f0000001180)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe16, 0x5dc, 0x0, 0xffffffffffffffa0) 05:22:46 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x1a0ffffffff}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 488.310830][T16401] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:46 executing program 2: socketpair$unix(0x1, 0x4, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:22:46 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\xff\xff\xff', 0x48, 0x0) [ 488.396590][T16409] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xd3, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:46 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x1c, &(0x7f0000000040)={0x0}, &(0x7f0000000140)=0x20000048) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @dev}], 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x8000) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000080)=0x1, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x19, &(0x7f0000000180)={r1}, 0x8) [ 488.565237][T16528] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:46 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x1000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0), 0x126) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r3, &(0x7f0000000380)) ioctl$void(r3, 0x5451) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r4, 0x0, 0x8000) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e21, @empty}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e23, @multicast2}, 0x200, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)='team0\x00', 0x20, 0x6, 0x6}) 05:22:46 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:22:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xd4, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:47 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x1) r1 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x1340, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x8000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r4, r5, 0x0, 0x8000) ioctl$KDSKBMETA(r5, 0x4b63, &(0x7f0000000300)=0xfffffffffffffffe) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r7 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r8 = fcntl$getown(r7, 0x9) ptrace$pokeuser(0x6, r8, 0x7fe, 0x2) ioctl(r1, 0x8912, &(0x7f00000008c0)="f59e131e79f154a7d8171700400892ac23a823df9a188cde74d4a3379c26e9b94a664c6d4b7c7f2f7c807f5604e9f25fa7138c150b99b2eee500086426593d107ca2923a9447ac9bbe11e112c02106e636c510c7cd19c23efc691bb6b74fd01ce3d482cc82596cb35afd36aab53f0becccd9467d6ed52e1f46871defe59a2bb2bd838b39bb55dc87db8add86369a9880766feed61cb6083493927e964c7e7ed0e3570d76e4752b53c92d6888ac12f003402ce08acab246541c36622e935c58d9b8cffb1735c98505cb6e1896445a7d74") remap_file_pages(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x1, 0x74f, 0x1000) creat(&(0x7f00000002c0)='./bus\x00', 0x4) rmdir(&(0x7f0000000240)='./bus\x00') write$binfmt_elf64(r7, &(0x7f00000007c0)=ANY=[], 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x21) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000440)={0xfffffffffffffffe, 0xfffffffffffffffb}, 0x8) ioctl$PIO_UNISCRNMAP(r6, 0x4b6a, &(0x7f0000000540)="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") r9 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_int(r1, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r11 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r10, r11, 0x0, 0x8000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1, 0x0, 0x2000000000010081}, 0xfe8e) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x2, r8}) shutdown(r6, 0x0) r12 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r12, &(0x7f0000000380)) fsetxattr$trusted_overlay_redirect(r12, &(0x7f00000007c0)='trusted.overlay.redirect\x00', &(0x7f0000000400)='./bus\x00', 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000200)={@local, 0x2, 0x2, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) socket$inet6(0xa, 0xa, 0x400) connect$inet6(r9, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r13 = syz_open_procfs(r8, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r9, r13, &(0x7f00000000c0)=0x202, 0x8) [ 488.968682][T16542] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 488.997528][T16546] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:47 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x180, 0x0) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:22:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xd5, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:47 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:22:47 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x20000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 489.171608][T16656] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 489.223400][T16663] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xd6, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:47 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:22:47 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x705001, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x44, r3, 0x0, 0x0, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1f}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4c000) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2101800d}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5352ef8f46f104d1}, 0x10008000) ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000300)) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) timer_create(0x4000000000000003, &(0x7f0000000180)={0x0, 0x19, 0x4, @tid=r4}, &(0x7f0000000000)) write$P9_RLINK(r2, &(0x7f0000000380)={0x7, 0x47, 0x2}, 0x7) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:22:47 executing program 0: io_setup(0x200, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xffffffffffffffff, 0x5}, 0x3c) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) io_submit(r0, 0x4a, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r2, 0x0}]) 05:22:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xd7, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:47 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x100000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:47 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:22:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @rand_addr=0x9}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x43ed, &(0x7f00000002c0)='ifb0\x00', 0x4, 0x3, 0x4}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r9, r10, 0x0, 0x8000) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r11, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendto$inet(r11, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r12 = accept(r11, 0x0, &(0x7f0000000000)) r13 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x200200, 0x0) getsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f00000009c0)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000ac0)=0x2b6) sendmsg$nl_route_sched(r12, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@gettfilter={0x24, 0x2e, 0x20, 0x70bd2a, 0x25dfdbfc, {0x0, r14, {0xffe0}, {0xf, 0xfff1}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) connect$packet(r10, &(0x7f0000000380)={0x11, 0x61, r14, 0x1, 0x20, 0x6, @random="92a4b95b2289"}, 0x14) accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)=0x2c78, 0x4) syz_open_dev$admmidi(&(0x7f0000000280)='/dev/admmidi#\x00', 0x22e73d2e, 0x4000) 05:22:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xd8, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:47 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x300, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x26, 0xf5, 0x1}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r0, r1, 0x0, 0x8000) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000040)=ANY=[@ANYBLOB="030000000000000000000000000000000000000000000000000000000000000000000800000000a2d9a7e000"/128]) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0xc2000) read(r2, &(0x7f00000004c0)=""/211, 0xd3) 05:22:47 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x200000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:47 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:22:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xd9, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xda, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r0, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000140)) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f00000001c0)=0x4, 0x4) 05:22:48 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b408000000000007000000ff0f004000000000000000001295bb9a9feb629e00"], &(0x7f0000000080)='GPL\x00', 0x3, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x8000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x8000) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r4) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f00000002c0)={0x0, 0xf0ffff, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r7, 0x5, 0x0, 0x0, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0xf0, @link='broadcast-link\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r7, 0x110, 0x70bd29, 0x25dfdbfb, {}, ["", ""]}, 0x1c}}, 0x40040) 05:22:48 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:22:48 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x300000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xdb, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @rand_addr=0x9}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x43ed, &(0x7f00000002c0)='ifb0\x00', 0x4, 0x3, 0x4}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r9, r10, 0x0, 0x8000) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r11, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendto$inet(r11, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r12 = accept(r11, 0x0, &(0x7f0000000000)) r13 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x200200, 0x0) getsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f00000009c0)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000ac0)=0x2b6) sendmsg$nl_route_sched(r12, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@gettfilter={0x24, 0x2e, 0x20, 0x70bd2a, 0x25dfdbfc, {0x0, r14, {0xffe0}, {0xf, 0xfff1}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) connect$packet(r10, &(0x7f0000000380)={0x11, 0x61, r14, 0x1, 0x20, 0x6, @random="92a4b95b2289"}, 0x14) accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)=0x2c78, 0x4) syz_open_dev$admmidi(&(0x7f0000000280)='/dev/admmidi#\x00', 0x22e73d2e, 0x4000) 05:22:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xdc, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:49 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x3, &(0x7f0000000000)={0x0, 0x3d, 0x8}, &(0x7f0000000180)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:22:49 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x8000) r4 = syz_open_dev$midi(&(0x7f0000000440)='/dev/midi#\x00', 0x0, 0x8800) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000540)=""/246) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r6, r7, 0x0, 0x1) ioctl$SG_IO(r7, 0x2285, &(0x7f00000004c0)={0x53, 0xfffffffffffffffd, 0x43, 0x2, @buffer={0x0, 0xb8, &(0x7f0000000200)=""/184}, &(0x7f0000000140)="238a2cfc08b17d0365ffaa4fb65efaecd0d429f367e595e23a5fb7763054ccea898587120f560693c688a306df349d995cf590ba52a99dafe3c13e35367515f3241154", &(0x7f00000002c0)=""/173, 0xfcf, 0x1, 0xffffffffffffffff, &(0x7f0000000400)}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r8, 0x0, 0x8000) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000100)={r8}) sendfile(r0, r1, 0x0, 0x8000) r9 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r9, &(0x7f0000000380)) fcntl$addseals(r9, 0x409, 0x1) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000040)={0x5, "469941484f06513083dc69425bd7da62d59cad94941b8c8bfc9df4b7d53187b5", 0xb7fe08975145ef3c, 0x40, 0xffffffff, 0x97a, 0x0, 0x2, 0x1ff, 0x8}) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x430000) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000001100)={0x7, "a5b86f75401ebf492610cda26028cae9e8fc37c74eef5ac18d0f0000a400", 0x1, 0xd702d6b10b53a664, 0x0, 0x9, 0x0, 0x1, 0x1}) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000640)={[], 0xffffffff, 0x47c, 0x20, 0x1, 0x2}) 05:22:49 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:22:49 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x400000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xdd, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:49 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:22:49 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x500000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3b1, 0x40) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x400000, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000080)=0x6d98) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={@null=' \x00', 0x6, 'dummy0\x00'}) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x8000) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000280)={0x28, 0xfffffffffffffc01, 0x7, 0xb, 0x2}) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e0000001e000507ed0080258c6394f20531d20010001040d707000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 05:22:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xde, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) [ 491.347874][T17299] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 491.378096][T17340] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 05:22:49 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x600000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @rand_addr=0x9}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x43ed, &(0x7f00000002c0)='ifb0\x00', 0x4, 0x3, 0x4}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r9, r10, 0x0, 0x8000) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r11, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendto$inet(r11, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r12 = accept(r11, 0x0, &(0x7f0000000000)) r13 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x200200, 0x0) getsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f00000009c0)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000ac0)=0x2b6) sendmsg$nl_route_sched(r12, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@gettfilter={0x24, 0x2e, 0x20, 0x70bd2a, 0x25dfdbfc, {0x0, r14, {0xffe0}, {0xf, 0xfff1}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) connect$packet(r10, &(0x7f0000000380)={0x11, 0x61, r14, 0x1, 0x20, 0x6, @random="92a4b95b2289"}, 0x14) accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)=0x2c78, 0x4) syz_open_dev$admmidi(&(0x7f0000000280)='/dev/admmidi#\x00', 0x22e73d2e, 0x4000) 05:22:50 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x0) bind(r0, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x2, @random="a86695b093ce", 'bridge_slave_1\x00'}}, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/unix\x00\x91\xfbp\x14\xce\x80\xc4\xa8\'30\xfaq\xf6\\\xb4EL\xa8e\xb5\xfb9\'d\x0f\'\x84\xcfAP\x82\xdf\xcc\xe3d\x82\x99o\xdd\xbd\xcb\xe6}\xeak\xd6\x95\x06n\x9b\xcf\x02\xfd\xd5\xfe\xd1\x14\xd3\xf7\x83~\xc3\xc4\xc4>_%\xbd;\xab\x80\xb00B%\xfc\xfa\\\xde\xd82SZ\x84\x0e\xb4c\a*\xae\xa2,\'\xf1\xefs\xde\xf7\x89\x8e8\xd3\x95\x18\xa8\x82\xe4\x8bs\t\xce\xb0\xb9\xb8\xe6T\x81\x18\xb4k\x97l\xc3\xc9E\x86\xccM\xaf\xbd\x940xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000000380)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x8000) r5 = creat(&(0x7f0000000240)='./bus\x00', 0x0) syncfs(r5) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000440)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, r6}, 0x4) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f00000000c0)={r8}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f00000005c0)={r8, @in={{0x2, 0x4e24}}, 0x2, 0x7fff, 0x3, 0x8e1e, 0xe66}, &(0x7f0000000680)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r8, 0x40, 0x30}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000240)={r8, @in6={{0xa, 0x4e23, 0x200, @ipv4={[], [], @broadcast}, 0x80}}, 0x1}, &(0x7f0000000300)=0x90) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e24, @multicast1}}, 0x0, 0x0, 0x0, "2764ce6ffdbed2399077f4564d14039e645249fdf76799031c0571894ec796ba16cc30798adf3fcbe9fbac071cc35b40a2b2dd8ff8d19d3e5ff682ee14a830f3c27e8e25526496861b78cc872dacf634"}, 0xd8) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000000)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:22:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xe0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:50 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = fanotify_init(0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) fanotify_mark(r1, 0x5, 0x1b, r0, 0x0) write$eventfd(r0, &(0x7f0000000040), 0x8) readv(r1, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/5, 0x5}], 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x100200, 0x359) 05:22:50 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x01', 0x48, 0x0) 05:22:50 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0xa00000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xe1, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000080)={0x10, 0xd, 0x5}) [ 492.687203][T17758] validate_nla: 21 callbacks suppressed [ 492.687229][T17758] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @rand_addr=0x9}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x43ed, &(0x7f00000002c0)='ifb0\x00', 0x4, 0x3, 0x4}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r9, r10, 0x0, 0x8000) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r11, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendto$inet(r11, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r12 = accept(r11, 0x0, &(0x7f0000000000)) r13 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x200200, 0x0) getsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f00000009c0)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000ac0)=0x2b6) sendmsg$nl_route_sched(r12, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@gettfilter={0x24, 0x2e, 0x20, 0x70bd2a, 0x25dfdbfc, {0x0, r14, {0xffe0}, {0xf, 0xfff1}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) connect$packet(r10, &(0x7f0000000380)={0x11, 0x61, r14, 0x1, 0x20, 0x6, @random="92a4b95b2289"}, 0x14) accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)=0x2c78, 0x4) syz_open_dev$admmidi(&(0x7f0000000280)='/dev/admmidi#\x00', 0x22e73d2e, 0x4000) 05:22:51 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\xf0\xff', 0x48, 0x0) 05:22:51 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x8000) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x308, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xa60d20ce6d2c27dd}, 0x4004000) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000280)='nv\x00', 0x3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r4, r5, 0x0, 0x8000) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{}, {}]}) 05:22:51 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x1000000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) munlockall() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x8000) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r5 = eventfd(0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0xf000, 0x0, 0x1, r5, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe3000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1e) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:22:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xe2, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) [ 493.187427][T17773] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:51 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001340)='/dev/dlm_plock\x00', 0x2, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x40, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f00000001c0)='./file0\x00'}, 0x10) socketpair(0x1e, 0x1, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x1, 0x3}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) memfd_create(0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x200000, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000180)=0x4) write$UHID_INPUT2(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$void(0xffffffffffffffff, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) fcntl$getown(r1, 0x9) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x2, 0x0, 0x0, 0x0, 0x8ae}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, 0x0, 0x0) 05:22:51 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x1800000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:51 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x02\x00', 0x48, 0x0) [ 493.263737][T17846] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xe3, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:51 executing program 0: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r0, r1, 0x0, 0x8000) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc02c5625, &(0x7f0000000100)={0x0, 0x0, {0x401, 0x351, 0x0, 0x1, 0x6, 0x1, 0x1}}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x10400, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x6, 0x400100) ioctl$TCSETXW(r4, 0x5435, &(0x7f0000000180)={0x0, 0x70000000000, [0x9, 0x20000000200, 0x7, 0x80000000, 0xffffffffffffffe1], 0xe}) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x14) ioctl$RTC_UIE_ON(r2, 0x7003) 05:22:51 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) r2 = epoll_create(0xbc) fsetxattr$security_ima(r2, &(0x7f0000000000)='security.ima\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x4, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x8000) ioctl$RTC_AIE_OFF(r4, 0x7002) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) [ 493.600922][T17999] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 493.655551][T18000] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @rand_addr=0x9}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x43ed, &(0x7f00000002c0)='ifb0\x00', 0x4, 0x3, 0x4}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r9, r10, 0x0, 0x8000) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r11, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendto$inet(r11, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r12 = accept(r11, 0x0, &(0x7f0000000000)) r13 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x200200, 0x0) getsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f00000009c0)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000ac0)=0x2b6) sendmsg$nl_route_sched(r12, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@gettfilter={0x24, 0x2e, 0x20, 0x70bd2a, 0x25dfdbfc, {0x0, r14, {0xffe0}, {0xf, 0xfff1}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) connect$packet(r10, &(0x7f0000000380)={0x11, 0x61, r14, 0x1, 0x20, 0x6, @random="92a4b95b2289"}, 0x14) accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)=0x2c78, 0x4) 05:22:52 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x04\x00', 0x48, 0x0) 05:22:52 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x2a01000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xe4, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:52 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x02\x00', 0x48, 0x0) 05:22:52 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) close(r1) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000180)) readv(r2, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000140)=0x4) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) [ 494.269202][T18021] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 494.324198][T18020] overlayfs: overlapping lowerdir path [ 494.330579][T18101] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:52 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x4000000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xe5, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:52 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x02\x00', 0x48, 0x0) 05:22:52 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\'\x00', 0x48, 0x0) 05:22:52 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f0000000580), 0x4) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) [ 494.683592][T18208] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:52 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x4800000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 494.745788][T18226] overlayfs: overlapping lowerdir path 05:22:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @rand_addr=0x9}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x43ed, &(0x7f00000002c0)='ifb0\x00', 0x4, 0x3, 0x4}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r9, r10, 0x0, 0x8000) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r11, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendto$inet(r11, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r12 = accept(r11, 0x0, &(0x7f0000000000)) r13 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x200200, 0x0) getsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f00000009c0)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000ac0)=0x2b6) sendmsg$nl_route_sched(r12, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@gettfilter={0x24, 0x2e, 0x20, 0x70bd2a, 0x25dfdbfc, {0x0, r14, {0xffe0}, {0xf, 0xfff1}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) connect$packet(r10, &(0x7f0000000380)={0x11, 0x61, r14, 0x1, 0x20, 0x6, @random="92a4b95b2289"}, 0x14) accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 05:22:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xe6, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:53 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\xf0\x00', 0x48, 0x0) 05:22:53 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpid() tkill(r1, 0x1000000000013) sched_getaffinity(r1, 0x8, &(0x7f0000000000)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x8000) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000140)=0x1, 0x4) fstat(r2, &(0x7f0000000380)) r5 = socket$alg(0x26, 0x5, 0x0) r6 = signalfd4(r5, &(0x7f0000000080)={0xfffb}, 0xffffffffffffff77, 0x100000) readv(r6, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) r7 = openat(r4, &(0x7f0000000180)='./file0\x00', 0x80000, 0x3) ioctl$IMDELTIMER(r7, 0x80044941, &(0x7f0000000200)) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:22:53 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x02\x00', 0x48, 0x0) 05:22:53 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x4c00000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 495.355172][T18370] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 495.390640][T18369] overlayfs: overlapping lowerdir path 05:22:53 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\xa0\x01', 0x48, 0x0) 05:22:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xe7, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @rand_addr=0x9}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x43ed, &(0x7f00000002c0)='ifb0\x00', 0x4, 0x3, 0x4}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r9, r10, 0x0, 0x8000) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r11, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendto$inet(r11, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r12 = accept(r11, 0x0, &(0x7f0000000000)) r13 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x200200, 0x0) getsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f00000009c0)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000ac0)=0x2b6) sendmsg$nl_route_sched(r12, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@gettfilter={0x24, 0x2e, 0x20, 0x70bd2a, 0x25dfdbfc, {0x0, r14, {0xffe0}, {0xf, 0xfff1}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) connect$packet(r10, &(0x7f0000000380)={0x11, 0x61, r14, 0x1, 0x20, 0x6, @random="92a4b95b2289"}, 0x14) accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)=0x2c78, 0x4) 05:22:53 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x6800000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 495.642136][T18483] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:53 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00 ', 0x48, 0x0) 05:22:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xe8, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @rand_addr=0x9}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x43ed, &(0x7f00000002c0)='ifb0\x00', 0x4, 0x3, 0x4}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r9, r10, 0x0, 0x8000) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r11, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendto$inet(r11, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r12 = accept(r11, 0x0, &(0x7f0000000000)) r13 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x200200, 0x0) getsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f00000009c0)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000ac0)=0x2b6) sendmsg$nl_route_sched(r12, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@gettfilter={0x24, 0x2e, 0x20, 0x70bd2a, 0x25dfdbfc, {0x0, r14, {0xffe0}, {0xf, 0xfff1}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) connect$packet(r10, &(0x7f0000000380)={0x11, 0x61, r14, 0x1, 0x20, 0x6, @random="92a4b95b2289"}, 0x14) accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 05:22:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @rand_addr=0x9}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x43ed, &(0x7f00000002c0)='ifb0\x00', 0x4, 0x3, 0x4}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r9, r10, 0x0, 0x8000) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r11, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendto$inet(r11, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r12 = accept(r11, 0x0, &(0x7f0000000000)) r13 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x200200, 0x0) getsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f00000009c0)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000ac0)=0x2b6) sendmsg$nl_route_sched(r12, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@gettfilter={0x24, 0x2e, 0x20, 0x70bd2a, 0x25dfdbfc, {0x0, r14, {0xffe0}, {0xf, 0xfff1}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) connect$packet(r10, &(0x7f0000000380)={0x11, 0x61, r14, 0x1, 0x20, 0x6, @random="92a4b95b2289"}, 0x14) accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)=0x2c78, 0x4) 05:22:54 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x6c00000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:56 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0xfffffe89, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x8000) getsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x4) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r4, r5, 0x0, 0x8000) r6 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r7, &(0x7f0000000380)) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f00000002c0)={0x2, 0x8, 0x1, 0x8, 0x6}) ioctl$PPPIOCSMRU(r6, 0x40047452, &(0x7f0000000180)=0xfff) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x6) 05:22:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xe9, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:56 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\'', 0x48, 0x0) 05:22:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @rand_addr=0x9}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x43ed, &(0x7f00000002c0)='ifb0\x00', 0x4, 0x3, 0x4}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r9, r10, 0x0, 0x8000) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r11, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendto$inet(r11, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r12 = accept(r11, 0x0, &(0x7f0000000000)) r13 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x200200, 0x0) getsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f00000009c0)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000ac0)=0x2b6) sendmsg$nl_route_sched(r12, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@gettfilter={0x24, 0x2e, 0x20, 0x70bd2a, 0x25dfdbfc, {0x0, r14, {0xffe0}, {0xf, 0xfff1}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) connect$packet(r10, &(0x7f0000000380)={0x11, 0x61, r14, 0x1, 0x20, 0x6, @random="92a4b95b2289"}, 0x14) accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)=0x2c78, 0x4) 05:22:56 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x7400000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r4, r5, 0x0, 0x8000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r6, r7, 0x0, 0x8000) ioctl$sock_inet_SIOCDELRT(r7, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @rand_addr=0x9}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x43ed, &(0x7f00000002c0)='ifb0\x00', 0x4, 0x3, 0x4}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r8, r9, 0x0, 0x8000) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r10, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendto$inet(r10, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r11 = accept(r10, 0x0, &(0x7f0000000000)) r12 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x200200, 0x0) getsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f00000009c0)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000ac0)=0x2b6) sendmsg$nl_route_sched(r11, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@gettfilter={0x24, 0x2e, 0x20, 0x70bd2a, 0x25dfdbfc, {0x0, r13, {0xffe0}, {0xf, 0xfff1}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) connect$packet(r9, &(0x7f0000000380)={0x11, 0x61, r13, 0x1, 0x20, 0x6, @random="92a4b95b2289"}, 0x14) accept4$netrom(r5, 0x0, &(0x7f0000000140), 0x80000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) [ 498.379359][T18726] validate_nla: 2 callbacks suppressed [ 498.379386][T18726] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:56 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x7a00000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:56 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00@', 0x48, 0x0) [ 498.453005][T18832] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:56 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\'', 0x48, 0x0) 05:22:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xea, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:56 executing program 2: socketpair$unix(0x1, 0xddb662d93b092d5a, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmctl$IPC_RMID(r2, 0x0) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000140)=""/198) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats\x00') ioctl$CAPI_GET_SERIAL(r3, 0xc0044308, &(0x7f0000000240)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) [ 498.780322][T18927] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:56 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x8000000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:56 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\xf0', 0x48, 0x0) 05:22:56 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0xd252aff6d933f3e5, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000140)={0x3, 0x5, 0x1}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r2, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) [ 498.830485][T18910] overlayfs: overlapping lowerdir path [ 498.850943][T18953] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xeb, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:57 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40400, 0x0) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) r1 = socket$inet(0xa, 0x800, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, 0x0, &(0x7f0000000300)) [ 499.161073][T19070] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:57 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400000, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) syncfs(r1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000440)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, r2}, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000000c0)={r4}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000005c0)={r4, @in={{0x2, 0x4e24}}, 0x2, 0x7fff, 0x3, 0x8e1e, 0xe66}, &(0x7f0000000680)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r4, 0x40, 0x30}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={r4, 0x4}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000001c0)=r5, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r7, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) [ 499.217577][T19071] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:57 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:22:57 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x85ffffff00000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r4, r5, 0x0, 0x8000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r6, r7, 0x0, 0x8000) ioctl$sock_inet_SIOCDELRT(r7, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @rand_addr=0x9}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x43ed, &(0x7f00000002c0)='ifb0\x00', 0x4, 0x3, 0x4}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r8, r9, 0x0, 0x8000) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r10, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendto$inet(r10, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r11 = accept(r10, 0x0, &(0x7f0000000000)) r12 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x200200, 0x0) getsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f00000009c0)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000ac0)=0x2b6) sendmsg$nl_route_sched(r11, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@gettfilter={0x24, 0x2e, 0x20, 0x70bd2a, 0x25dfdbfc, {0x0, r13, {0xffe0}, {0xf, 0xfff1}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) connect$packet(r9, &(0x7f0000000380)={0x11, 0x61, r13, 0x1, 0x20, 0x6, @random="92a4b95b2289"}, 0x14) accept4$netrom(r5, 0x0, &(0x7f0000000140), 0x80000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 05:22:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xec, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:57 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x8000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x8000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) sched_getscheduler(r5) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000004c0)={0x201000000a, 0xfffbffffffffffff, 0x0, r4}) 05:22:57 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x8000) setsockopt(r3, 0xa02a, 0x4, &(0x7f0000000000)="7aaa6ec29fd82baaedc328fa036deda13318", 0x12) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) [ 499.543515][T19100] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:57 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x9800000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:57 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\xff\xff', 0x48, 0x0) 05:22:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xed, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:57 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000240)='./control\x00', 0x0) r2 = inotify_init1(0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'hsr0\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x20000005002}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x8000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=r7, @ANYBLOB="481efb5c0176affa58c1ae42"], 0x10) fcntl$setstatus(r2, 0x4, 0x72109c5fef5d34d3) r8 = creat(&(0x7f0000000240)='./bus\x00', 0x0) syncfs(r8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000440)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, r9}, 0x4) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="a44686dd", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r10, 0x84, 0x1, &(0x7f00000000c0)={r11}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r8, 0x84, 0xf, &(0x7f00000005c0)={r11, @in={{0x2, 0x4e24}}, 0x2, 0x7fff, 0x3, 0x8e1e, 0xe66}, &(0x7f0000000680)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r11, 0x40, 0x30}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r11, 0xf0, 0x2}, &(0x7f0000000080)=0x8) socket$inet_dccp(0x2, 0x6, 0x0) 05:22:58 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3, 0x40) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000140)={0x3, 0xa6, 0x1}) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) [ 499.915370][T19233] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:58 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0xff00000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:58 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:22:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xee, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) [ 500.233000][T19335] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x8000) write$P9_RRENAME(r3, &(0x7f0000000140)={0x7, 0x15, 0x2}, 0x7) bind$alg(r1, &(0x7f0000000840)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r4 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r4, &(0x7f0000000100), 0x14ded905162a6c92, 0x0, 0x0, 0xfffffffffffffec6) recvfrom(r4, &(0x7f0000001240)=""/4096, 0xfffffffffffffc43, 0x0, 0x0, 0x8c) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x10) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000080)=0x6) 05:22:58 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) 05:22:58 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:22:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xef, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:58 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0xff0f000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r4, r5, 0x0, 0x8000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r6, r7, 0x0, 0x8000) ioctl$sock_inet_SIOCDELRT(r7, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @rand_addr=0x9}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x43ed, &(0x7f00000002c0)='ifb0\x00', 0x4, 0x3, 0x4}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r8, r9, 0x0, 0x8000) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r10, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendto$inet(r10, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r11 = accept(r10, 0x0, &(0x7f0000000000)) r12 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x200200, 0x0) getsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f00000009c0)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000ac0)=0x2b6) sendmsg$nl_route_sched(r11, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@gettfilter={0x24, 0x2e, 0x20, 0x70bd2a, 0x25dfdbfc, {0x0, r13, {0xffe0}, {0xf, 0xfff1}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) connect$packet(r9, &(0x7f0000000380)={0x11, 0x61, r13, 0x1, 0x20, 0x6, @random="92a4b95b2289"}, 0x14) accept4$netrom(r5, 0x0, &(0x7f0000000140), 0x80000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) [ 500.561408][T19445] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:22:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xf0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:58 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0xffffffff00000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:58 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x8000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x7fff, 0x80, 0x86, 0x0, 0x100000000, 0x20, 0x2, 0x7, 0x7, 0x6, 0x3, 0x8, 0x0, 0x4, 0x6, 0x6a9, 0x6, 0x1, 0x9f5}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r3, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:22:58 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:22:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xf1, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:59 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0xffffffffa0010000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:59 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) socketpair(0x7, 0x3, 0x20, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000140)=""/109, &(0x7f00000001c0)=0x6d) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:22:59 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:22:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xf2, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:59 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:59 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) fdatasync(r0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_create(0x4, &(0x7f00000001c0)={0x0, 0x11, 0x3}, &(0x7f0000000240)=0x0) timer_getoverrun(r3) timer_getoverrun(r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x4002, 0x0) pidfd_send_signal(r5, 0x22, &(0x7f0000000080)={0x10, 0x7b5, 0x2}, 0x0) close(r4) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x923626dc68f11e08, 0x0) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r4, r6, 0x0, 0x800000000024) 05:22:59 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:22:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xf3, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:22:59 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:22:59 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000000)={0x0, 0x0, 0x1004}) 05:22:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @rand_addr=0x9}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x43ed, &(0x7f00000002c0)='ifb0\x00', 0x4, 0x3, 0x4}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r9, r10, 0x0, 0x8000) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r11, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendto$inet(r11, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r12 = accept(r11, 0x0, &(0x7f0000000000)) r13 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x200200, 0x0) getsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f00000009c0)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000ac0)=0x2b6) sendmsg$nl_route_sched(r12, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@gettfilter={0x24, 0x2e, 0x20, 0x70bd2a, 0x25dfdbfc, {0x0, r14, {0xffe0}, {0xf, 0xfff1}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) connect$packet(r10, &(0x7f0000000380)={0x11, 0x61, r14, 0x1, 0x20, 0x6, @random="92a4b95b2289"}, 0x14) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 05:22:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xf4, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:00 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:23:00 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:00 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000600)=[@in6={0xa, 0x4e24, 0x4, @remote, 0x7}, @in6={0xa, 0x4e22, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}], 0x38) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x8000) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000540)={0x4, 0x3, 0x9, 0x3, 0x10, 0x0, 0xffffffffffffffff, 0x6cca0f49, 0x7, 0x10000000, 0x2, 0x4}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r4, &(0x7f0000000140)="6a105019fea29caa0e47dbe82a112df67f3dfaf154f34d95010f1405ee16a9f63a22d6e014ba84508c015564665cd653fb40e9802b1c58887104c5ad8382c428a7e55c3c669a867f2001202e113310b60873835e943090fb048364d1bd4e16529df62cdfa84998c96c5a0bbeef9f1cdb11e0bba1b316e564dab232f4b58aab1a8c10", &(0x7f0000000200)=""/90}, 0x18) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000003c0), &(0x7f0000000400)=0x8) move_mount(r6, &(0x7f00000002c0)='./file0\x00', r4, &(0x7f0000000300)='./file0\x00', 0x12) lsetxattr(&(0x7f0000000440)='./file0\x00', &(0x7f00000004c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x10, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r6, 0x4008ae48, &(0x7f0000000380)) ioctl$PPPIOCGFLAGS1(r4, 0x8004745a, &(0x7f0000000580)) 05:23:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xf5, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:00 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:00 executing program 0: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x5bb, 0x22600) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={':yz', 0x3}, &(0x7f0000000080)='/dev/vbi#\x00', 0xffffffffffffffff) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x1000, 0x200) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000140)={0x0, 0x5, 0x1, 0xfb, 0x2, [{0x1, 0x4, 0x100000000, 0x0, 0x0, 0x180bd229caef9eb3}, {0x1, 0x771, 0x0, 0x0, 0x0, 0x282}]}) 05:23:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @rand_addr=0x9}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x43ed, &(0x7f00000002c0)='ifb0\x00', 0x4, 0x3, 0x4}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r9, r10, 0x0, 0x8000) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r11, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendto$inet(r11, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r12 = accept(r11, 0x0, &(0x7f0000000000)) r13 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x200200, 0x0) getsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f00000009c0)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000ac0)=0x2b6) sendmsg$nl_route_sched(r12, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@gettfilter={0x24, 0x2e, 0x20, 0x70bd2a, 0x25dfdbfc, {0x0, r14, {0xffe0}, {0xf, 0xfff1}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) connect$packet(r10, &(0x7f0000000380)={0x11, 0x61, r14, 0x1, 0x20, 0x6, @random="92a4b95b2289"}, 0x14) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 05:23:00 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\xff\xff', 0x48, 0x0) 05:23:00 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xf6, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:00 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() tkill(r1, 0x28) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) read(r2, &(0x7f0000481000)=""/128, 0x80) clock_gettime(0x6, &(0x7f0000000000)) 05:23:00 executing program 0: openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x5, 0x400200) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r0, r1, 0x0, 0x8000) syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x10001, 0x141000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0xa000, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000440)='/dev/snd/pcmC#D#p\x00', 0x9, 0x10001) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000200)={0x3}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000340)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x4004743d, &(0x7f0000001080)=""/246) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r4, r5, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x2000, 0x30}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000080)={0x14efbacf, 0x8005, 0x380f6f37, 0x5, r6}, &(0x7f00000000c0)=0x10) close(r3) 05:23:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xf7, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:00 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\xff\xff', 0x48, 0x0) 05:23:01 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x8000) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000000)={0x10000, 0x4051284d, 0xa1, 0x3, 0x1, @discrete={0xa11c, 0x7}}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r3, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:23:01 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xf8, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:01 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\xff\xff', 0x48, 0x0) 05:23:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @rand_addr=0x9}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x43ed, &(0x7f00000002c0)='ifb0\x00', 0x4, 0x3, 0x4}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r9, r10, 0x0, 0x8000) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r11, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendto$inet(r11, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r12 = accept(r11, 0x0, &(0x7f0000000000)) r13 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x200200, 0x0) getsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f00000009c0)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000ac0)=0x2b6) sendmsg$nl_route_sched(r12, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@gettfilter={0x24, 0x2e, 0x20, 0x70bd2a, 0x25dfdbfc, {0x0, r14, {0xffe0}, {0xf, 0xfff1}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) connect$packet(r10, &(0x7f0000000380)={0x11, 0x61, r14, 0x1, 0x20, 0x6, @random="92a4b95b2289"}, 0x14) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 05:23:01 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x17b, 0x11, 0x30}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x80, 0x0) 05:23:01 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xf9, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:01 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\xf0', 0x48, 0x0) 05:23:01 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x60) [ 503.846575][T20522] validate_nla: 17 callbacks suppressed [ 503.846599][T20522] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:01 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\xeb\xff', 0x48, 0x0) 05:23:01 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x14, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000140)=0x0) timer_settime(r2, 0x3, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x7}}, 0x0) [ 503.929036][T20560] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:02 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x10}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:02 executing program 0: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x0, 0x2) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r1) fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r3, &(0x7f0000000380)) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r4, &(0x7f0000000380)) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000f00)='/dev/dsp\x00', 0x4000, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x1c}, 0x0, 0x0, 0x0, 0x5}}, 0xe8) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'tunl0\x00', 0x0}) getpeername$packet(r9, &(0x7f0000003500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmmsg$inet6(r9, &(0x7f0000003800)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0xfffffffffffffe00, @local, 0x2}, 0x1c, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)="aa5bffb06b4b774ddc92523af8768cdcdf13797aa234813498fa7de0dfacdcd355ca55a6bf12493cfaa55d868c534cfa", 0x30}], 0x2, &(0x7f0000000400)=[@dstopts={{0x20, 0x29, 0x37, {0x33, 0x0, [], [@pad1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x10000}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r10}}}, @hoplimit={{0x14, 0x29, 0x34, 0x80}}, @hopopts_2292={{0x38, 0x29, 0x36, {0x84, 0x3, [], [@jumbo, @enc_lim={0x4, 0x1, 0x9}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x2b}}, @enc_lim={0x4, 0x1, 0xba5}]}}}], 0xb0}}, {{&(0x7f00000004c0)={0xa, 0x4e23, 0xad6, @local}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="880000000000000029ad0000390000002c0e010100000000e444a20a2e7f0e5ab9909919a649ca00fe8000000000000000000000000000bb78c7fe8000000000000000000000000000000000000000000000000000000000000100000000000000000000ffff7f000001000000000000000000000000000000010000000000000000000000000000000014000000000000002900000043000000c1ffffff00000000200000000000000029000000360000002b00000000000000c204000000350000380000000000000029000000370000000003000000000000050200000718000000ff04fe0000f8ffffffffffffff0000000000000000"], 0xf8}}, {{0x0, 0x0, &(0x7f00000010c0)=[{0x0}, {&(0x7f0000000e40)="1ca40d9eaa4fed39b290cd99bce66a580f2b", 0x12}, {&(0x7f0000000f80)="b0", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001140)}, {0x0}, {0x0}], 0x3}}], 0x5, 0x0) setgid(r7) r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r11, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r12) r13 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r13, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r14) sendmsg$key(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=ANY=[@ANYBLOB="631fe8f05864b22739f65adc7088e86a92b5eb8ba6b623fd8f6588b5a6fcd056d02d19188132a82b85e39dc5d6bddc83cc2a0c7b1b306b8ff5862a77bb737eec516ef45d861d57ac1a462ed72d1430d1392e887127d529541bd593dc8f0a7511c45b47d4f5af77f56226d5b12c3b3d86d4f8df0b2a205717d90cdc79cc8ea54d44e1ade2782a6df481882d5993515806b9fc8b75c582a70d296b01e0a6c998f70b91de1486d1e57707a36dbb6cf7a7898b3ca269e29450f978c5e875c200ba7eb05c216727f404f8047f405c903f91b2249da6fcc4f26e4fcc9dff70faae1ef207", @ANYPTR64=&(0x7f0000000f80)=ANY=[@ANYRES32=r7, @ANYRES32=r12, @ANYPTR=&(0x7f0000000f40)=ANY=[@ANYPTR64], @ANYRES64=r14], @ANYRESDEC, @ANYRES16, @ANYRES16=r4], 0x386}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) 05:23:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xfa, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:02 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\xf6\xff', 0x48, 0x0) [ 504.257995][T20657] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @rand_addr=0x9}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x43ed, &(0x7f00000002c0)='ifb0\x00', 0x4, 0x3, 0x4}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r9, r10, 0x0, 0x8000) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r11, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendto$inet(r11, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r12 = accept(r11, 0x0, &(0x7f0000000000)) r13 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x200200, 0x0) getsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f00000009c0)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000ac0)=0x2b6) sendmsg$nl_route_sched(r12, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@gettfilter={0x24, 0x2e, 0x20, 0x70bd2a, 0x25dfdbfc, {0x0, r14, {0xffe0}, {0xf, 0xfff1}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 05:23:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xfb, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:02 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r2 = accept(r1, 0x0, &(0x7f0000000000)) r3 = syz_open_dev$usbmon(&(0x7f0000000880)='/dev/usbmon#\x00', 0x7, 0x200082) setsockopt$inet_buf(r3, 0x0, 0x11, &(0x7f00000008c0)="a4b5d1a9111336f3636f82c5ce12a8ecf95caa04c975d4b613d74620121bb17838ca8f870aa4cb112c5c1bcddc805c27e9311c05b8c849657d5405a890e2be473227b6cc6ca3e65a2974312b051230ad2569f571d64d052aaba7683acd1c471dc0232abd47fc9827b05a190ab6c314bffad295cf9313a6045466f1ec1a392d369beda094505f0c53f026f84b2f001dbf0013ec7c704ace13e413e0e8183e2a23255159362a1b1f260aa40112b27eba7a917a363d76a81e2e043748", 0xbb) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000009c0)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000ac0)=0xe8) sendmsg$nl_route_sched(r2, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000002e0000002abd7000fcdbdf2500000000", @ANYRES32=r4, @ANYBLOB="e0ff0000fb10d5588d4c044108000b0003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@loopback, 0x4e23, 0x8, 0x4e23, 0x7, 0x2, 0x1c0, 0x20, 0x0, r4, r6}, {0x40, 0x4, 0xffffffff, 0x800, 0x8, 0x5, 0x10000000000000, 0x4}, {0x1, 0x9, 0x4, 0x100}, 0x8c3, 0x0, 0x0, 0x0, 0x1, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0xe}, 0x4d2, 0x3c}, 0xa, @in=@multicast1, 0x3506, 0x5, 0x0, 0xe54, 0x100000, 0x1eac, 0x4}}, 0xe8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000100)={0x6, &(0x7f0000000080)=[{0x1, 0x5, 0x7, 0x3}, {0x2, 0x43b2, 0x7, 0x6}, {0x3, 0x9, 0x9, 0x2}, {0x4, 0x3f, 0x100000001, 0x7ff}, {0x0, 0x7fff, 0x7fffffff, 0x9}, {0x5, 0x1, 0x5, 0x9}]}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r9, r10, 0x0, 0x8000) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@local, @in=@local}}, {{}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 05:23:02 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x18}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:02 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\xfe\xff', 0x48, 0x0) [ 504.859849][T20770] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:02 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) r2 = getpid() tkill(r2, 0x1000000000013) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r4, &(0x7f0000000380)) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1001) kcmp(r2, r3, 0x0, r4, r5) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:23:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xfc, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:03 executing program 0: bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) r0 = open(&(0x7f0000000000)='./file0\x00', 0x82040, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x82040, 0x0) fcntl$setlease(r1, 0x400, 0x0) connect$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @empty}, 0x10) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) 05:23:03 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x48}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 505.137441][T20893] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:03 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\xff\xff', 0x48, 0x0) [ 505.185410][T20898] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xfd, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) [ 505.425662][T21004] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:03 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x4c}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @rand_addr=0x9}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x43ed, &(0x7f00000002c0)='ifb0\x00', 0x4, 0x3, 0x4}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r9, r10, 0x0, 0x8000) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r11, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendto$inet(r11, 0x0, 0x0, 0x200007fd, 0x0, 0x0) accept(r11, 0x0, &(0x7f0000000000)) r12 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x200200, 0x0) getsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f00000009c0)={{{@in6, @in6=@remote}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000ac0)=0x2b6) accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 05:23:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xfe, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:03 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:23:03 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x68}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0xfd, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) [ 505.997400][T21128] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 506.023993][T21130] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 506.059109][T21143] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:06 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x6c}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:06 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:23:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x102, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:06 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000000380)) r2 = fcntl$dupfd(r0, 0x406, r1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r4 = accept(r3, 0x0, &(0x7f0000000000)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000009c0)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000ac0)=0xe8) sendmsg$nl_route_sched(r4, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@gettfilter={0x2c, 0x2e, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, r5, {0xffe0}, {0xf, 0xfff1}, {0x7}}, [{0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000040)=r5) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r9, r10, 0x0, 0x8000) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x4, 0x624000) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r12 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r11, r12, 0x0, 0x8000) getsockopt$X25_QBITINCL(r6, 0x106, 0x1, 0x0, &(0x7f0000000180)=0xfffffffffffffc85) sysinfo(&(0x7f0000000080)=""/170) 05:23:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @rand_addr=0x9}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x43ed, &(0x7f00000002c0)='ifb0\x00', 0x4, 0x3, 0x4}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r9, r10, 0x0, 0x8000) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r11, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendto$inet(r11, 0x0, 0x0, 0x200007fd, 0x0, 0x0) accept(r11, 0x0, &(0x7f0000000000)) openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x200200, 0x0) accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 05:23:06 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r3 = accept(r2, 0x0, &(0x7f0000000000)) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000009c0)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000ac0)=0xe8) sendmsg$nl_route_sched(r3, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@gettfilter={0x2c, 0x2e, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, r4, {0xffe0}, {0xf, 0xfff1}, {0x7}}, [{0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$can_raw(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f0000000180)={&(0x7f0000000140)=@can={{0x3, 0x0, 0xdb, 0x40}, 0x1, 0x2, 0x0, 0x0, "fc93bdb082541f4c"}, 0x10}, 0x1, 0x0, 0x0, 0x8808}, 0x22050880) 05:23:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x103, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:06 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x74}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:06 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\xff\xff', 0x48, 0x0) 05:23:06 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffd1e}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600203f00000a00000000000000000500e50000070000001f000000000000250000000000000200010000000000000000020000627c05000500000000000a00000000000000ff1700000000000000e2ffffffff00170000000000000000"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a0009070000000000000000b3480005001a00aca466aa000a00000000ffffffff0000fe800a3f5b11000000000000200000aa02000024"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) r1 = getpid() tkill(r1, 0x1000000000013) capget(&(0x7f0000000140)={0x19980330, r1}, &(0x7f0000000240)={0xffff, 0x0, 0x0, 0x120000000000, 0x5581}) 05:23:06 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) ioctl(r0, 0x0, &(0x7f0000000140)="a984b717323f483f7831c235c3c8b5de2b3908ce1fde583741ebe0ab888a0016cbc85a0ef71cc01c6df80e65a2703cfd6a080dd01240af36867dd9313805e5a1e67e59095606ede9e0ece1248f4191309fd89dca57ce5a8c91babd4c20bd5186b4a210ba0d08af8090ecb0f6d9cd8bd18f043e713c56e3448bfe466586727f74666f5fdc58aef00d7076605b490b1df6557126c2ea2f75b00b23cc80ae3b6f85e8ba58c9709162a9befa66aa0c77eb2b6782ffb558c07c4d10d1934d5808b401a102f6eb0b0185813164afaf6feb9b5c761c1c070b29cc5d1b") timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:23:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x104, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:06 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:23:06 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x7a}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x105, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:06 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r0, r1, 0x0, 0x8000) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x8000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = getpid() tkill(r6, 0x1000000000013) r7 = syz_open_procfs(r6, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r7, 0x0, 0x8000) socketpair(0x1, 0x4, 0x649af773, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r8, 0x84, 0x8, &(0x7f0000000280), &(0x7f00000002c0)=0x4) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000200)={0x43, 0x4, 0x3}, 0x10) ioctl$KDGKBENT(r4, 0x4b46, &(0x7f0000000380)={0xbb57, 0x2}) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x200, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000140)='memory.current\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r10, 0x1261, &(0x7f0000000180)=0x1) r11 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r11, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) [ 508.909802][T21580] validate_nla: 3 callbacks suppressed [ 508.909827][T21580] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 508.961127][T21605] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @rand_addr=0x9}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x43ed, &(0x7f00000002c0)='ifb0\x00', 0x4, 0x3, 0x4}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r9, r10, 0x0, 0x8000) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r11, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendto$inet(r11, 0x0, 0x0, 0x200007fd, 0x0, 0x0) accept(r11, 0x0, &(0x7f0000000000)) accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 05:23:07 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:23:07 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x98}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x106, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) [ 509.190320][T21612] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:07 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x12a}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 509.238260][T21684] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x105, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:09 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:23:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x107, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:09 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x1a0}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @rand_addr=0x9}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x43ed, &(0x7f00000002c0)='ifb0\x00', 0x4, 0x3, 0x4}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r9, r10, 0x0, 0x8000) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r11, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendto$inet(r11, 0x0, 0x0, 0x200007fd, 0x0, 0x0) accept(r11, 0x0, &(0x7f0000000000)) accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) [ 511.565355][T21839] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 511.605633][T21889] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 511.621872][T21875] netlink: 'syz-executor.0': attribute type 9 has an invalid length. 05:23:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x108, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) [ 511.800736][T21950] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 511.831150][T21951] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:10 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0), 0x0) rseq(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x5, 0x590a06e1, 0x4, 0x4}, 0x1}, 0x20, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x9}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000100)={r4, @in={{0x2, 0x4e20, @multicast1}}, 0x9, 0x8}, 0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000280)={0x0, @remote, @empty}, &(0x7f00000002c0)=0xc) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:23:10 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:23:10 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x300}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:10 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00F\xee\xdc\xb6\x02i\xac\x8d\xa1\xdd!D\xee\x1b\x1a\x8e\x8a\x9c\xa1evI\xa4\x03\'\xe5\n\xecf\xfb\x979\xca`@\x93\x1dtB\x102\xd1\xcc\x18\x92\xd3\xb4\xeb\xa4\x8b\xb8@\xec\xba\x9aEg\xb0\x91\xfe\x03\x97\x9eAv\x1bf\x13-\xf9``\x92|ZY&L\xf9_\xb70\x9a\n\xc9\xe0m\x0el\xe6\xfe\x01\x1e@\x1a\x90\x94X\xaf@\xc1\x95\xdbjmg\x8cb\x90\xd4\xd9S\x8e\xcd\n\xdf\x16e\xcc\xfa\xb0\bw)\'\xa8\x90\xd4\x83\x0f\xb1\xfc\xb9\xd3\xa5\xe2;H &,\xb2\xc0\xddT\xd6\x10RJ\xb4\x82\xb20Z\xda[,\x19MD\xf89\xa5\xbc+\tF\x88\x0e\xe2\xce\xaf\xdd\n\x13\xc5\x80\'k0\"=\x8f\x16\x0f\x91S\x04\xbc', 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='io.bfq.weight\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x7ffd) 05:23:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x109, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) [ 512.131168][T21963] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:10 executing program 0: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48040, 0x0) fcntl$setsig(r0, 0xa, 0xb) fcntl$setlease(r0, 0x400, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) open(&(0x7f0000000540)='./file0\x00', 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000040)='pagemap\x00') sendfile(r1, r3, 0x0, 0x8000) write$P9_RLOCK(r3, &(0x7f0000000000)={0x8, 0x35, 0x2, 0x2}, 0x8) 05:23:10 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x500}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:10 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:23:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x10a, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:10 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x8000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x2c) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:23:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x10b, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @rand_addr=0x9}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x43ed, &(0x7f00000002c0)='ifb0\x00', 0x4, 0x3, 0x4}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r9, r10, 0x0, 0x8000) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r11, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendto$inet(r11, 0x0, 0x0, 0x200007fd, 0x0, 0x0) accept(r11, 0x0, &(0x7f0000000000)) accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 05:23:10 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x600}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:10 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:23:10 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000180)=0x8000) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {r2, r3+30000000}}, 0x0) 05:23:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x10c, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:11 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x700}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 513.217387][ T26] audit: type=1804 audit(1567920191.246:1205): pid=22088 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir440465884/syzkaller.OX1K3m/291/file0" dev="sda1" ino=17704 res=1 05:23:11 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:23:11 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:23:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x10d, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) [ 513.248267][ T26] audit: type=1804 audit(1567920191.276:1206): pid=22146 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir440465884/syzkaller.OX1K3m/291/file0" dev="sda1" ino=17704 res=1 05:23:11 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0xa00}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x10e, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) [ 513.483563][T22432] overlayfs: overlapping lowerdir path 05:23:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @rand_addr=0x9}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x43ed, &(0x7f00000002c0)='ifb0\x00', 0x4, 0x3, 0x4}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r9, r10, 0x0, 0x8000) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r11, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendto$inet(r11, 0x0, 0x0, 0x200007fd, 0x0, 0x0) accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 05:23:11 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:23:11 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:23:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x10f, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:11 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) prctl$PR_SET_TSC(0x1a, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) 05:23:11 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x1800}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x110, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) [ 513.942286][T22553] overlayfs: overlapping lowerdir path 05:23:12 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:23:12 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x2000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:12 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) [ 514.200199][T22670] validate_nla: 9 callbacks suppressed [ 514.200225][T22670] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x111, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:12 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) [ 514.464170][T22695] overlayfs: overlapping lowerdir path [ 514.505400][T22784] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 514.556381][T22786] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @rand_addr=0x9}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x43ed, &(0x7f00000002c0)='ifb0\x00', 0x4, 0x3, 0x4}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r9, r10, 0x0, 0x8000) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r11, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 05:23:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f00000000c0)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000440)={0x0, 0x1c9c380}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x8000) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) r3 = dup(r0) getsockopt$inet_buf(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)) 05:23:12 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x2a01}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x112, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) [ 514.958991][T22796] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x113, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:13 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\xf0', 0x48, 0x0) 05:23:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r0, r1, 0x0, 0x8000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x8000) openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x2, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r5, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:23:13 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x4000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:13 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x02', 0x48, 0x0) [ 515.283443][T22919] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x114, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:13 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x4800}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:13 executing program 0: lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r0) r1 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x0, 0x4}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x8000) sendmsg(r3, &(0x7f0000000540)={&(0x7f00000000c0)=@nl=@kern={0x10, 0x0, 0x0, 0x102601}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="5028ade6550c93f13e6a5a5e1dd2e4fec7141270bfdb12864a227bc53712078a54379c", 0x23}, {&(0x7f0000000240)="e10aa1a590931ce1e56910d394761c7bfd26f1105576482d4c475212f1810bc6af2d80a87eefbb61e17dd136c79ce1ba5572aa28ceb54ed940d0d4a4986cac3f810f6e98a8f74707c25ea8abc025bd19ec0f41de91b35a33c962444f30efc63ddf6634a5d09e29269e32caf061b5d2032ef84004dec9c5b3d83bf7006d949edd337f136783446ee5078e5a2ec2ad004fadc8b7f3f9fe93db97112684f563432e2f8aa0c83405a469124975ce436708c99f29e8a194091229389db864752571c56ea85d83aeaf52709431aa56ffc781c25aa1d4ab08a0963d1f1369f759ae95bc0c5e7c33880aa3994e08ac", 0xeb}, {&(0x7f0000000340)="36e0a1789aab6d6d1d74bbba3766c5ec99e680bc2c99778e9ef3a122c6158d717381742cc6360cad980d67bcd9f0974afbab42c1b162f881a2f02fe8b1d65b83b4cd2e8eafaafa6cfb08c841a7c04a9e5ca67d7f508724e654b0a6ff6b4afcb0f7a263038cf5a91504d555b982678fdf41d7e4b9352ff5cf", 0x78}], 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x180}, 0x40) [ 515.593811][T23036] overlayfs: overlapping lowerdir path [ 515.609257][T23037] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:13 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x04', 0x48, 0x0) 05:23:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x115, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:13 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(r0, &(0x7f0000000080)={0x6}, 0x2f, 0x80800) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x40, 0x0) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x280000b, 0x30, r2, 0x0) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x140002, 0x0) r4 = getpid() tkill(r4, 0x1000000000013) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8f, 0xfffffffffffffffa}}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r5, &(0x7f0000000380)) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r6, &(0x7f0000000380)) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r7, &(0x7f0000000380)) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x40002, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/ion\x00', 0x8000, 0x0) r9 = inotify_init() ppoll(&(0x7f0000000a00)=[{0xffffffffffffffff, 0x100}, {r3, 0x2}, {r5, 0x8}, {r6, 0xe400}, {r7, 0x1}, {r8, 0xb62a1e0226bfef9}, {r9, 0x20}, {r1, 0x1000}], 0x8, &(0x7f0000000a40)={0x0, 0x1c9c380}, &(0x7f0000000a80)={0x5}, 0x8) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r11, &(0x7f0000000380)) ioctl$FS_IOC_SETFSLABEL(r11, 0x41009432, &(0x7f00000004c0)="351812f8886c04db87baa6af37b427e49ec14ee896b08d6f4a6aecdf3e4c9bfc9e0e1dbea9c1dfa1824840381baa3b77742dd236996ce211a26657656233a618389f878ad4fafa6f1c096346532e02136e0ae9aff11a93c441c8813ba867b585ea620d80538a20688043857d49785c7db5e138ca52a4eea95183fdd44b0b9dbbeb634fc7a14aadd0fcbe09bbfcff16debbd3bd180505d565486edad8943136668c0a8e3df2de2bdb0598192fb915330cbe23da8f526911573a0b0586b0d2c6695142372816eda30216507a84277f6129515336232543d75f43aef943b6a1b10c469100f78e3b98e6988f92318ea8a5e3b2cdb75cd8976490e616bf4265969848") r12 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r10, r12, 0x0, 0x8000) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r12, 0x28, 0x1, &(0x7f0000000000)=0x8, 0x8) ioctl$TCSETAW(r12, 0x5407, &(0x7f0000000140)={0x9, 0xcc, 0x2, 0x6, 0x18, 0x800, 0x34774b92, 0x120, 0x400040000, 0x1}) 05:23:13 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x8000) sendto$inet6(r3, &(0x7f0000000140)="bf24c91e13de3f17f0505f4f3235bccf42b1122160cab1e715ac541e18612c1c9215a0fff4c22ebe55bea1b9a276bb7ace3463652f31b38bfe0affd495e92b007a56bf42bdef94dc1d5d75014e135e7335fd027ed5f3faccb0b48304cdcf839ddb473c04ddec6774884c3cbd34e5d9db2243f54ac58870504c58433474a8ecc5dca1aa20b275eb82f5a76c6703add575796d8689b51644", 0x97, 0x4, &(0x7f0000000040)={0xa, 0x4e22, 0xffffffffffff8000, @remote, 0x1}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000100)=0x400000000008000, 0xffba) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f00000003c0)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="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", 0x599}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000300)=0x6, 0x4) recvfrom$inet6(r0, 0x0, 0xfffffffffffffd24, 0x0, 0x0, 0x0) 05:23:14 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x4c00}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @rand_addr=0x9}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x43ed, &(0x7f00000002c0)='ifb0\x00', 0x4, 0x3, 0x4}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r9, r10, 0x0, 0x8000) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r11, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) [ 516.038991][T23159] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 516.083904][T23201] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:14 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) nanosleep(&(0x7f0000000000), &(0x7f0000000140)) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000180)={0x2444, 0x1, 0x200, 0xfffffffffffffe00, 0x8}) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:23:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x116, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:14 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x6800}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:14 executing program 0: write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000000)={{0x80000000, 0x7}, 0xf8b8}) rt_sigaction(0x0, &(0x7f00000000c0)={0x0, {}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000200)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ubi_ctrl\x00', 0x10000, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe101}, [@IFLA_LINKINFO={0x20, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0x14, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8}], @IFLA_VTI_REMOTE={0x8, 0x5, @remote}]}}}]}, 0x40}}, 0x0) 05:23:14 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\'', 0x48, 0x0) 05:23:14 executing program 2: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000000380)) pwrite64(r1, &(0x7f0000000000)="5ffb2195ed29dbea72648e38583672819cf8184c2d08a4ef54f3ca9d", 0x1c, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x62) readv(r2, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x42000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000000140)="b3e04a4b327ced89e9758a127b3802a4443d27e5784ab516cc1908c09ccadba000a93f6f874b89101a88212769", 0x2d, r5}, 0x68) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) [ 516.436310][T23337] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:14 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x6c00}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 516.570335][T23343] device vti0 entered promiscuous mode [ 516.633188][T23387] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:14 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\xf0', 0x48, 0x0) 05:23:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x117, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:14 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x04', 0x48, 0x0) 05:23:14 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x7400}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 516.966564][T23510] overlayfs: overlapping lowerdir path 05:23:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @rand_addr=0x9}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x43ed, &(0x7f00000002c0)='ifb0\x00', 0x4, 0x3, 0x4}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r9, r10, 0x0, 0x8000) socket$inet(0x2, 0x4000000000000001, 0x0) accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 05:23:15 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x9, 0x121200) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}}}, &(0x7f0000000200)=0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000240)={r5, 0xfffffffffffffffb, 0xffff}, &(0x7f0000000280)=0x8) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:23:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x118, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:15 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\xa0', 0x48, 0x0) 05:23:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x500200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x8000) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000080)={0x6}, 0x4) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000013000/0x4000)=nil, 0x4000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = creat(&(0x7f0000000240)='./bus\x00', 0x0) syncfs(r6) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000440)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, r7}, 0x4) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="58010000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f00000000c0)={r9, 0x0, 0x0, 0x0, 0x5}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f00000005c0)={r9, @in={{0x2, 0x4e24}}, 0x2, 0x7fff, 0x3, 0x8e1e, 0xe66}, &(0x7f0000000680)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r9, 0x40, 0x30}, &(0x7f0000000040)=0xc) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r11 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r10, r11, 0x0, 0x8000) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r11, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x401, 0x14}, &(0x7f0000000200)=0x18) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0xd, &(0x7f0000000140)=@sack_info={r12, 0x5, 0x8000}, &(0x7f0000002000)=0x3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @empty}, @in={0x2, 0x0, @multicast2}], 0x20) r13 = dup2(r1, r5) dup3(r13, r2, 0x0) 05:23:15 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x7a00}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:15 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) sendfile(r2, r3, 0x0, 0x8000) ioctl$TIOCNOTTY(r3, 0x5422) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:23:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x119, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:15 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:23:15 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000013001707ed12806cd200a2680fcce973066510e533fb0d61e18fbd2fe6a5dd80009d0001080100000000", 0x2e}], 0x1, 0x0, 0x0, 0x2}, 0x0) acct(&(0x7f00000001c0)='./file0\x00') mq_open(&(0x7f0000000000)='bdev\'em1$cgroup*\x00', 0x0, 0x10, &(0x7f0000000100)={0x6, 0x1000, 0xc2, 0x8, 0x7f, 0x0, 0x7, 0xa1}) 05:23:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x11a, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:15 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:23:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @rand_addr=0x9}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x43ed, &(0x7f00000002c0)='ifb0\x00', 0x4, 0x3, 0x4}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r9, r10, 0x0, 0x8000) accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 05:23:16 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x9800}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x11b, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:16 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000000380)) r3 = dup(r2) setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000000)=0xa6c, 0x4) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000002940), &(0x7f0000002980)=0x4) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000180)=0x8) readv(r4, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r5, &(0x7f0000000380)) fsetxattr$security_capability(r5, &(0x7f00000001c0)='security.capability\x00', &(0x7f0000000200)=@v1={0x1000000, [{0x200, 0x1ff}]}, 0xc, 0x5) 05:23:16 executing program 0: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x5, 0x20000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x8000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000140)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'veth0_to_team\x00', 0x20}) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x4ddc07a948f663c1) 05:23:16 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:23:16 executing program 0: perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x17, 0x0, 0x40002, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, 0x0, &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x18) 05:23:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x11c, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:16 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x8000) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000000)=0x7c3fa406, 0x4) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:23:16 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:23:16 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0xff00}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:16 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x3d, &(0x7f0000000100)={'security\x00'}, &(0x7f0000000040)=0x54) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x8000) sendto$inet(r2, &(0x7f0000000280)="1dd0147a383af137011531e10cecabf9025f0855b26a5513d45644608e9d", 0x1e, 0x4000, &(0x7f00000002c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x8000) ioctl$BLKALIGNOFF(r4, 0x127a, &(0x7f0000000240)) setsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f0000000180)="77540ec1c4ad60ecf19e2d8b2e4262d5060dab00df83f26dc0508af283800d9f454fa4f3ecdd5dee9f89d63840ed4e9842f3871f68ea9c1f551812afe7f3d74bfa50ef7602e4e29d32e30100f2bbaa369ffb6fb36503d1c1240f2c42e55ab6bb7dd444777d9f2be979028b5b8037dcd848dcfe978b9a580f5df38948cba718ec6dbf0980b08f9d98b7fa6e8932ac28188103a723b6f2e10dfddbaff0af40b34d3faa8f6fa464f7cfac3f1b2d227f4c4fd9d4edc915f782dd", 0xb8) 05:23:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @rand_addr=0x9}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x43ed, &(0x7f00000002c0)='ifb0\x00', 0x4, 0x3, 0x4}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 05:23:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x11d, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:17 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:23:17 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0xff0f}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:17 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000000180)='./file0\x00', 0x410081, 0x10) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x1) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r2, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) r3 = gettid() r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r4, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) sendto$llc(r6, &(0x7f00000001c0)="99b5b065d5d5ba6e2de78eb3a33691bee4dd68ec4a4ab8dd17e214ac79d0a7c8368f71904f0908a1c33a75460aab029af80890b5f53f6a64beda994c5d96857a04bcff8733321c0d34", 0x49, 0x10000800, &(0x7f0000000240)={0x1a, 0x334, 0x4, 0x2, 0x9, 0x1, @remote}, 0x10) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80, 0x0) ioctl$KVM_SET_XCRS(r7, 0x4188aea7, &(0x7f0000000140)={0x1, 0x8, [{0x2, 0x0, 0x6}]}) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:23:17 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = semget$private(0x0, 0x1, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200]) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000000380)) fcntl$setlease(r2, 0x400, 0x0) semop(r1, &(0x7f0000000100), 0x2d) semctl$IPC_RMID(r1, 0x0, 0x0) [ 519.367287][T24019] validate_nla: 10 callbacks suppressed [ 519.367314][T24019] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 519.474063][T24030] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x11e, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:17 executing program 0: io_setup(0x4, &(0x7f0000000500)=0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x80, 0x0) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14}, 0x14) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000140)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) io_submit(r0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0x12f}]) 05:23:17 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\xff', 0x48, 0x0) 05:23:17 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x200000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 519.798950][T24145] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:17 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x101800) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:23:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x11f, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) [ 520.178003][T24264] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 520.231603][T24265] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @rand_addr=0x9}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x43ed, &(0x7f00000002c0)='ifb0\x00', 0x4, 0x3, 0x4}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 05:23:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000140)) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1ff, 0x20000) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) semctl$GETALL(0x0, 0x0, 0x11, &(0x7f00000001c0)=""/54) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0x400, 0x1f, 0x410, 0x3f}, 0x8) 05:23:18 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:23:18 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000380)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400202) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r2, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000140)={0xd89, 0x40, 0x5, 0x4, 0x9, 0x8001, 0xffffffffffffffc0, 0x40, 0x6, 0x1, 0x7f, 0x3}) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000180)) 05:23:18 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x120, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) [ 520.499529][T24277] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:18 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x400000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f00000001c0)=0x400) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r2, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x63, 0xb64dc848a32c9435) ioctl$KVM_ASSIGN_PCI_DEVICE(r3, 0x8040ae69, &(0x7f0000000140)={0xcf9d, 0x0, 0x4, 0x4, 0x7}) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) [ 520.551188][T24310] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:18 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:23:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x121, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:18 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x4, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffff9, 0x84001) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000080)={0x0, @default, @rose={'rose', 0x0}, 0x0, 'syz1\x00', @null, 0x0, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) shutdown(r0, 0x1) 05:23:18 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x2000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 520.783624][T24396] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:18 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0), 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x8000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r4, r5, 0x0, 0x8000) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4010641c, &(0x7f0000000280)={r6, &(0x7f0000000180)=""/199}) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:23:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @rand_addr=0x9}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x43ed, &(0x7f00000002c0)='ifb0\x00', 0x4, 0x3, 0x4}) openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 05:23:19 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xe, 0xe, 0xc9, 0x0, 0x100, 0xffffffffffffffff, 0xffffffffffffffff}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x2, 0x4, 0x10001, 0x0, r0}, 0x2c) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4000, 0x80) 05:23:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x122, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:19 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:23:19 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x3000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:19 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r0, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) [ 521.580022][T24529] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:19 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) [ 521.629456][T24565] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:19 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:23:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x123, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:19 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x4000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:19 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f0000000000), 0x0) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) r2 = creat(&(0x7f0000000100)='.\x00', 0x40) r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0) syncfs(r3) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000440)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, r4}, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) ioctl$TIOCGPTPEER(r6, 0x5441, 0x800) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="010000007dc3371312fbd87e8a7e8dfef5f995aa7f6c4fed1f752103e3dc7f76f08208b6bee9cad221d792ef81a44c8da9d7b3e6d5c409bceac806c36f6d8aa01b0252b46e000000007c25000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$VT_WAITACTIVE(r9, 0x5607) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f00000000c0)={r8}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000005c0)={r8, @in={{0x2, 0x4e24}}, 0x2, 0x7fff, 0x3, 0x8e1e, 0xe66}, &(0x7f0000000680)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r8, 0x40, 0x30}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000140)={r8, 0x9}, &(0x7f0000000180)=0x8) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x20a580, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r10, 0xc0145401, &(0x7f00000000c0)={0xffffffffffffffff, 0x2, 0x7f, 0x3, 0x4}) [ 521.920754][T24641] overlayfs: overlapping lowerdir path 05:23:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x124, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @rand_addr=0x9}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x43ed, &(0x7f00000002c0)='ifb0\x00', 0x4, 0x3, 0x4}) openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 05:23:20 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() tkill(r1, 0x1000000000013) timer_create(0x0, &(0x7f0000000000)={0x0, 0x27, 0x0, @tid=r1}, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r2, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:23:20 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:23:20 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x20001, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, 0x0) ptrace$setregset(0x4205, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x8000) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{}]}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) syz_open_dev$ndb(0x0, 0x0, 0x4000) unshare(0x600) semget$private(0x0, 0x3, 0xba) syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x8, 0x501100) getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/161, 0xa1) 05:23:20 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x5000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x125, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x126, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x100000890e, &(0x7f0000000200)="11dca50d5e0bcfe47bf070c51e75c0cc9c57673e25bf085c9b5726278397b59bf67d8bd17c83e4840659f8fc1ff0ce3e47617394436c088d879ca82989ad057716279930b419bf8afe18d7be32226c1eff47849d4c4603b5b7a3b57e1232ac9a77a117faf4d1a22a81c4169be1da70de599e3b31253a4b887e31359b3b66c7d603ee4da07f282641014196a20a3931fc9235f3f21bdc87cd1e73f38cedd2c5ab950c001edc42a1c40c8aab2323d1bd94924a08317a05118cd80d4e000b352b7e91bfbf421f47d16ae7637cb3f8fc00d3b12d4048137b97d0fc734e54c55aacaff195307847518d10485edf17c38a9562") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xe, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x0, 0xffffff7f], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x20) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000140)={0x1, {{0xa, 0x4e20, 0x5, @rand_addr="9c790883cd9b0ac5d289ba7de933b0cb", 0x1f}}}, 0x88) 05:23:20 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:23:20 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x6000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x127, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:21 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000100)=0xc) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x40, 0x0) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0) 05:23:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @rand_addr=0x9}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x43ed, &(0x7f00000002c0)='ifb0\x00', 0x4, 0x3, 0x4}) accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 05:23:23 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x7000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x128, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:23 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\xff', 0x48, 0x0) 05:23:23 executing program 0: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1000, 0x410000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x305140, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000180)={0x7, 0x4b, 0x1}, 0x7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagema\x80\x00') r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f0000000380)=0x18c, 0x4) sendfile(r2, r3, 0x0, 0x8000) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x4, @mcast1, 0xcf}, {0xa, 0x4e22, 0x8, @mcast1}, r5}}, 0x48) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x7ff) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4004}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5f308523996b5c863719f05eecca3d03b47490732a0cbd30060c12adb6c59e80dc7604c9a46b588db77fd9a4a3", @ANYRES16=r6, @ANYBLOB="10002cbd7000fbdbdf250400000008000500070000000c00030008000300030000001c00030008000800010000000800030002000000080007004e24000028000100080006006c63000008000600736800000c00070018000000060000000800090070000000"], 0x6c}, 0x1, 0x0, 0x0, 0x40000004}, 0x40080) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, 0x0, &(0x7f0000000100)) 05:23:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @rand_addr=0x9}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x43ed, &(0x7f00000002c0)='ifb0\x00', 0x4, 0x3, 0x4}) accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 05:23:23 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = dup(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140), 0x106, 0x2}}, 0x20) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f00000002c0)={0x0, 0xf0ffff, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r4, 0x5, 0x0, 0x0, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0xf0, @link='broadcast-link\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r4, 0x300, 0x70bd29, 0x25dfdbfd, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x20}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0xf3d1a75d5ff9edc4}, 0x40) readv(r2, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19, 0x8}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='statm\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) sendfile(r5, r6, 0x0, 0x8000) ioctl$sock_rose_SIOCRSCLRRT(r6, 0x89e4) [ 525.674994][T25025] validate_nla: 9 callbacks suppressed [ 525.675021][T25025] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:23 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/a\xeb\v\x00\x00#\x00', 0x27, 0x101000) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)) ioctl$TUNSETIFF(r0, 0x800454cf, &(0x7f0000000300)={'nr0\x01\x00'}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000040)={0x24a, 0x15, 0x1, 0x5f3d, 0x107e}) 05:23:23 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0xa000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x129, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:23 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\xff', 0x48, 0x0) 05:23:24 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000001780)='/dev/video#\x00', 0x1, 0x2) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000000)={0x4, {0x3ff, 0x5, 0x5, 0x80}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x8000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x8000) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)={0x0, 0xd, 0x4, 0x0, {0x77359400}, {0x5, 0x0, 0x0, 0x0, 0x0, 0xfff, "09b11cd1"}, 0x7, 0x0, @offset, 0x4}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000040)={0x0, 0xa, 0x4, 0x400000, {0x77359400}, {0x1, 0x1, 0x4, 0x0, 0x40, 0x7f, "071ba78b"}, 0x7, 0x4, @userptr=0x3, 0x4}) 05:23:24 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x10000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 526.027105][T25247] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cecffc), 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r2 = accept(r1, 0x0, &(0x7f0000000000)) r3 = socket(0x8, 0x6, 0x4) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000009c0)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000ac0)=0x447) sendmsg$nl_route_sched(r2, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@gettfilter={0x2c, 0x2e, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, r4, {0xffe0}, {0xf, 0xfff1}, {0x7}}, [{0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@mpls_newroute={0xf4, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {0x1c, 0x150, 0x14, 0x0, 0xff, 0x1, 0x0, 0x1, 0x3800}, [@RTA_NEWDST={0x84, 0x13, [{0xffff, 0x0, 0x80000000}, {0x9, 0x0, 0x7}, {0x1, 0x0, 0xffffffffffffffff}, {0x80000000, 0x0, 0xc9}, {0x10000, 0x0, 0x7}, {0x40, 0x0, 0x3}, {0x4, 0x0, 0x2}, {0x1, 0x0, 0x6}, {0xffffffff}, {0x80, 0x0, 0x4}, {0x44}, {0xff, 0x0, 0x7ff}, {0x81, 0x0, 0x1f}, {0x6, 0x0, 0x5}, {0x3, 0x0, 0x40}, {0x1e58, 0x0, 0x81}, {0x0, 0x0, 0x2}, {0x80000001, 0x0, 0x20}, {0x40000000400, 0x0, 0x28e1}, {0x1f, 0x0, 0x2}, {0xfffffffffffeffff, 0x0, 0xffffffffffffffff}, {0x9, 0x0, 0x8}, {0x7, 0x0, 0x5}, {0xfffffffffffffeff, 0x0, 0x6}, {0x3bb5}, {0x4, 0x0, 0x4}, {0xec5c, 0x0, 0xdddf}, {0x3, 0x0, 0x5}, {0x1, 0x0, 0x3}, {0xffffffffffffffce, 0x0, 0x2bcd}, {0x6, 0x0, 0x6}, {0x8, 0x0, 0x7fffffff}]}, @RTA_DST={0x8, 0x1, {0x8eda, 0x0, 0x4}}, @RTA_TTL_PROPAGATE={0x8, 0x1a, 0x1}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0xca, 0x7ff, r4}}, @RTA_VIA={0x14, 0x12, {0x8, "83c39a4638bed5db4211e860011f"}}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0xa, "3c1ba83641f6aecbfa9a548728d4"}}, @RTA_DST={0x8, 0x1, {0x130, 0x0, 0x2}}]}, 0xf4}}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x10) 05:23:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x12a, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:24 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\xff', 0x48, 0x0) [ 526.265265][T25259] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 526.299284][T25295] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x129, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) [ 526.502291][T25373] netlink: 'syz-executor.0': attribute type 9 has an invalid length. 05:23:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 05:23:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x12b, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:24 executing program 0: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x613, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r2 = accept(0xffffffffffffffff, &(0x7f0000000180)=@nfc, &(0x7f0000000200)=0x80) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80084}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r3, 0xca0, 0x70bd2d, 0x25dfdbfc, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x7fffffff}}, ["", "", "", ""]}, 0x24}}, 0x80) setuid(r1) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x5, 0x1, &(0x7f0000000100)=[{&(0x7f0000000080)="a72d95fa25a08ee85248327a139dcd536b2ea823bdd058a468308d50ec7966bf3ee4b6191a4e9b043642e6c0993260913edbe5643c29f7b6419168fa64e379e3beb3e664082ea6455e15ef83fb1616b53aa6637f6295423fd7a93022344154edfaee9801de08cdc655e80779f37f4dea", 0x70, 0xfffffffffffffff9}], 0x40000, &(0x7f0000000140)={[{@tails_small='tails=small'}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_gt={'euid>', r1}}]}) 05:23:24 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x18000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:24 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)=0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000040)={{0x0, 0x1c9c380}, {r3, r4+10000000}}, 0x0) 05:23:24 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) [ 526.755003][T25388] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x12c, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:24 executing program 0: connect$netlink(0xffffffffffffffff, &(0x7f0000000180)=@unspec, 0xc) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0x0, &(0x7f0000004580)=[{&(0x7f0000004480)=""/245, 0xf5}], 0x1}}], 0x1, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000252) clock_settime(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1000, 0x80) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f00000001c0)={0x1aea, 0x0, 0x100000001, {r2, r3+10000000}, 0xff, 0x7}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r4 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r4, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="2321202e2f66696c65300a0c4af451732b60564e58bb26170df509852b03976bb3f459748df4beec6134b10444881808662b5e7ee49b2196bd2769110c0155b9fb6ac38473c20dde13e3e44b6f35138603c2b2becf9730775a9782651630a20a8d332009ec19d269274fb06c29a5eab80e570de254802b8d2cecaf067e0afea96d7126a4522dc9a05540921460edb59787634d621434c1b3b7918280eb"], 0x34000) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) 05:23:24 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\xeb', 0x48, 0x0) 05:23:24 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x2a010000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 527.067379][T25515] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:25 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\xf6', 0x48, 0x0) 05:23:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000008c0)='./file0\x00', 0x0, 0x20) fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x8000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f00000002c0)={0x0, 0xf0ffff, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r6, 0x5, 0x0, 0x0, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0xf0, @link='broadcast-link\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x68, r6, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x2, @media='udp\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x2000010}, 0x24020800) sendfile(r3, r4, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x40}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000000c0)={r9, 0x3}, &(0x7f0000000100)=0x8) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000000)={0x8e, 0x401, 0x6}) 05:23:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 05:23:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x12d, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x8000) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'gre0\x00', 0x2000}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(0xffffffffffffffff, r4, 0x0, 0x401) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000040)={0x10000, 0x1, 0x1f, 0x4, 0x3, 0x800000000000000, 0x4, 0xef, 0x5, 0xffff, 0x10, 0x1}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) ioctl$EVIOCGKEYCODE(r6, 0x80084504, &(0x7f0000000200)=""/247) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x7) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) 05:23:25 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x40000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:25 executing program 2: socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:23:25 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\xfe', 0x48, 0x0) [ 527.668732][T25637] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:25 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x48000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:25 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x5, 0x5, 0xe005}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xb1e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffcbd, 0x10, &(0x7f0000000000), 0x3}, 0x48) r0 = fcntl$getown(0xffffffffffffffff, 0x9) prctl$PR_SET_PTRACER(0x59616d61, r0) [ 527.736207][T25747] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x12e, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:25 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\xff', 0x48, 0x0) 05:23:25 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f0000000800)=[{&(0x7f00000008c0)=""/15}, {&(0x7f0000000240)=""/129}, {&(0x7f0000000380)=""/136}, {&(0x7f0000000440)=""/178}, {&(0x7f0000000500)=""/190}, {&(0x7f00000005c0)=""/247}, {&(0x7f00000006c0)=""/162}, {&(0x7f0000000300)=""/12}, {&(0x7f0000000780)=""/67}], 0x2000000000000287) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x930e, 0x101001) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f00000000c0)={0x2, 0x9}, 0x2) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:23:26 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x4c000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 528.097680][T25870] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 05:23:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x100, 0x4}) getsockopt$inet6_tcp_buf(r0, 0x6, 0x14, 0x0, &(0x7f0000000040)) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x80\x00', 0x402, 0x0) bind$isdn_base(r1, &(0x7f0000000100)={0x22, 0x101, 0x80000000, 0xffffffff, 0x200}, 0x6) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x400000, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f00000001c0)=[0x3, 0x1], 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x400, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x8000) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000200)={{0xa, 0x4e23, 0x7fffffff, @dev={0xfe, 0x80, [], 0xe}, 0x7f}, {0xa, 0x4e21, 0x8001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8000}, 0x8, [0x6, 0x6, 0x6, 0x1, 0x8000000000000000, 0x3, 0xffffffffacc6e24a, 0x1f]}, 0x5c) 05:23:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x12f, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:26 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000000380)) r3 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_UNIQUE(r3, 0xc0106401, &(0x7f0000000140)={0x2f, &(0x7f0000000000)=""/47}) 05:23:26 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:23:26 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x68000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x130, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x12f, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:26 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:23:26 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x10000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) r2 = getpid() tkill(r2, 0x1000000000013) r3 = getpid() tkill(r3, 0x1000000000013) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)={0x5, r3}) timer_create(0x7, &(0x7f0000000000)={0x0, 0x1d, 0x88b5b14b8931105e, @tid=r2}, &(0x7f0000000140)=0x0) timer_settime(r4, 0x0, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x7}}, 0x0) 05:23:26 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x6c000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x131, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:27 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\xff', 0x48, 0x0) 05:23:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfe47bf070") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b40000140000000063110400142100001e00000000000000950000000000000093a1668da063f88420f5e9a995ba4ba522c7cc558e08e2a2c17a542eb3783f6481a102dafb8858812cb136b5af9e2ec4078e47234cd39bede56901208ebb9df86ce8d2a717ac4e4697c317d52d5c9bff1e3391c4bacb5647ede4ae758fa2f2ab55ab3698a173c065534cf6e4147b3cc43745284f5bd0d50824aa98334327c18d22a06555e4658840ed76aefc5dfd0ff621635389725ded9b36375b595138021b05bcdee4c6741797236bd22cd37561bc"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 05:23:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x132, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 05:23:27 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x74000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x133, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:27 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="02000000010006000000000002000100", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000000010000300000000002000000000000000"], 0x34, 0x3) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r1, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00') 05:23:27 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:23:27 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x7a000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:30 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f0000000000), 0x100000000000026c) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:23:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x134, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:30 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:23:30 executing program 0: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = getpid() prlimit64(r0, 0x14, &(0x7f0000000040)={0x0, 0xff}, 0x0) set_tid_address(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x10, 0x0, 0x0) dup(r1) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) getcwd(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x2cb, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x48c19d24fcb91c7c) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x400000, 0x0, &(0x7f0000bff000/0x400000)=nil) 05:23:30 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x85ffffff}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000) accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) [ 532.083984][T26473] validate_nla: 8 callbacks suppressed [ 532.084028][T26473] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x135, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:30 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2000397, [{{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @rand_addr="64d60eac1a3d52d779d49a11df2168bc"}}, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @loopback}}]}, 0xfff8) syz_open_dev$swradio(&(0x7f0000000440)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000580)=0x8, 0x4) sendfile(r1, r2, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000480)={0x0, 0x4e0d3116}, &(0x7f00000004c0)=0x8) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20ncci\x00', 0x40, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r4, r5, 0x0, 0x8000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r6, r7, 0x0, 0x8000) r8 = inotify_add_watch(r7, &(0x7f0000000500)='./file0\x00', 0x1000001) inotify_rm_watch(r5, r8) signalfd4(r7, &(0x7f0000000540)={0x8001}, 0x8, 0x80000) ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, &(0x7f0000000400)={0x1, 0x9}) 05:23:30 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) accept4$netrom(r2, &(0x7f0000000140)={{0x3, @rose}, [@default, @bcast, @null, @netrom, @netrom, @null, @default, @bcast]}, &(0x7f00000001c0)=0x48, 0x80000) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:23:30 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x98000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:30 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) [ 532.422765][T26594] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:30 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:23:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x136, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:30 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0xa0010000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:30 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000280)='/dev/dmmidi#\x00', 0x1, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) r2 = syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x7, 0x5a1100) ioctl$KVM_ASSIGN_DEV_IRQ(r2, 0x4040ae70, &(0x7f0000000200)={0xc2, 0x2, 0x92, 0x601}) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)=0x0) r4 = accept(r0, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x80) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) ioctl$sock_SIOCBRDELBR(r6, 0x89a1, &(0x7f0000000300)='bcsh0\x00') setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000001c0)=0x10000, 0x4) clock_gettime(0x0, &(0x7f0000000240)) timer_settime(r3, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 05:23:30 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) [ 532.715623][T26616] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 532.744405][T26613] overlayfs: overlapping lowerdir path [ 532.788720][T26622] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:30 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, 0x7, {0x5}}, 0x18) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:23:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000) accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 05:23:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x137, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:31 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0xff000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:31 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$radio(&(0x7f00000085c0)='/dev/radio#\x00', 0x0, 0x2) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) syncfs(r1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000440)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, r2}, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000000c0)={r4}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000005c0)={r4, @in={{0x2, 0x4e24}}, 0x2, 0x7fff, 0x3, 0x8e1e, 0xe66}, &(0x7f0000000680)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r4, 0x40, 0x30}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000008600)={r4, 0xffffffffffffffe0, 0x10}, &(0x7f0000008640)=0xc) mount$9p_rdma(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=rdma,', {'port'}, 0x2c, {[{@common=@privport='privport'}]}}) 05:23:31 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) [ 533.152573][T26739] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:31 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x10000, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f0000000140)=""/128, 0xfffffffffffffe6e}], 0x1) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x8000) inotify_add_watch(r3, &(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x44c00) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000004c0)={'mangle\x00', 0x1000, "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"}, &(0x7f0000000200)=0x1024) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:23:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x138, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:31 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:23:31 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0xff0f0000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:31 executing program 0: r0 = socket$inet(0x2, 0x80000, 0x400002) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x2004e22, @local}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x24, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)='lapb0\x00', 0x4c3921f8, 0x7c, 0x1}) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x2, 0xebc2b6b6c95e45f8) 05:23:31 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) [ 533.559571][T26863] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x139, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) [ 533.810975][T26977] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 533.836260][T26978] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000) accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 05:23:32 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0xffffff85}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:32 executing program 0: syz_init_net_socket$ax25(0x3, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r0, r1, 0x0, 0x8000) write$rfkill(r1, &(0x7f0000000040)={0x9, 0x3, 0x1, 0x1, 0x1}, 0x8) setsockopt$ax25_int(r1, 0x101, 0x7, &(0x7f0000000080)=0x6, 0xfffffffffffffeff) socket$inet_dccp(0x2, 0x6, 0x0) 05:23:32 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:23:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x13a, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) [ 534.222854][T27027] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:32 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:23:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x13b, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000400)={0x4000001000036}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x0, 0x3}, 'ryz\x0f\x00\x00\x00\x00\x00\x80 \xff\xff\x00\x00\x00\x00\x00\xb13@\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xff\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x8000) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$UI_DEV_CREATE(r0, 0x5501) 05:23:32 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x1a0ffffffff}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 534.433268][T27105] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:32 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='cpu.stat\x00', 0x0, 0x0) r2 = gettid() openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x101200, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600)='/dev/net/tun\x00', 0x800, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='cpuacct.usage_percpu\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000ac0)='cgroup.stat\x00', 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/net/tun\x00', 0xfffffffffffffffd, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000100)=""/8) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x801}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x308) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) r7 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xbc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) close(r7) r8 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x7f, 0x8, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19b4, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x40082404, &(0x7f0000000000)) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000680)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W]\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf29\x01\x8dmsJ\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r2, r8, 0x0, 0x19, &(0x7f0000000200)='nodev/em1selinuxvboxnet1\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r2, r5, 0x0, 0xc, &(0x7f00000000c0)='cgroup.stat\x00', r9}, 0xcf0cb591b672d3ea) ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f0000000040)=""/84) 05:23:32 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:23:32 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x8000) r4 = creat(&(0x7f0000000240)='./bus\x00', 0x0) syncfs(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) ioctl$TIOCGSID(r6, 0x5429, &(0x7f00000004c0)=0x0) ptrace$poke(0x5, r7, &(0x7f0000000500), 0x1ff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000440)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, r8}, 0x4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f00000000c0)={r10}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000005c0)={r10, @in={{0x2, 0x4e24}}, 0x2, 0x7fff, 0x3, 0x8e1e, 0xe66}, &(0x7f0000000680)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r10, 0x40, 0x30}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140)={r10, 0x100000001}, &(0x7f0000000180)=0x8) r11 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) r12 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r12, &(0x7f0000000380)) r13 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r13, &(0x7f0000000380)) poll(&(0x7f0000000200)=[{r12, 0x1012}, {r0, 0x40}, {r0, 0x10000}, {r3, 0x101}, {r9, 0x4040}, {r11, 0x8012}, {r1, 0x1}, {r13}], 0x8, 0x8) readv(r11, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, 0x8, 0x20, 0x7, 0x4b2, 0x2}) r14 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0x1f, 0x20481) ioctl$UI_BEGIN_FF_UPLOAD(r14, 0xc06855c8, &(0x7f00000002c0)={0x5, 0x9, {0x0, 0x5704, 0x1, {0x4, 0x2}, {0x2, 0x100000000}, @const={0x28, {0xffffffffffff0001, 0x7, 0x80000000, 0x7}}}, {0x0, 0x20, 0xffffffff, {0x1f, 0xf6}, {0xfff, 0x5}, @rumble={0x81, 0x80}}}) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:23:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 05:23:33 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x1000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x13c, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:33 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:23:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5382, 0x0) 05:23:33 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r0, r1, 0x0, 0x8000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x8000) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x2, r3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r5, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:23:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munmap(&(0x7f000001d000/0x4000)=nil, 0x4000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) 05:23:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x13d, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:33 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x0) 05:23:33 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x20000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x13e, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:33 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x8000) ioctl$VT_DISALLOCATE(r2, 0x5608) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r3, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r4, r5, 0x0, 0x8000) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000140)) 05:23:34 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x100000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:34 executing program 0: unshare(0x8000400) r0 = mq_open(&(0x7f0000000040)='.selinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/24, 0x18}], 0x1) 05:23:34 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x2) 05:23:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x13f, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 05:23:34 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000004, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffff8, 0x1) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000180)=[{{r3, r4/1000+10000}, 0xc, 0xfffffffffffffff9, 0x10001}, {{0x0, 0x2710}, 0xa, 0x2, 0xffffffffffffffe1}, {{0x0, 0x7530}, 0x68035ad165d9005, 0x0, 0x1}], 0x48) 05:23:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x140, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:34 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0), 0x0) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19, 0x0, @thr={&(0x7f0000000140)="d3c624c32724c406e8b9c174a77d0f591c1353dc5608fa9dda1210d939d827f8901707f43be03e2eab7e8da3d6b334e8dc519e1fe31a5d00bf811aa488feb51a04a358ca383fd4f5aace1447be26f0e14706742acde589ef3d21b1b0ddcaf345062e8898c0c2af2528b03919f6fe850bdcba02a1c18931d6f6a705bfd4c7eb5e86f6a1eaed8c3f520679310a7dc95f323f776133dcb453f0047c18da3a2c0d000000", &(0x7f0000000380)="42b27703fef95a65dcb8f7103af6eed6b605685fac3b387b6cdaf31d8e59adf86ecdb342ab369f59759e77b8ecad699e6b8e07ced479757410aa04bd124d53f782e2e9dbb257852994158c8d7436954b339bc3cbe00872e716f02f3cbce206a65e3042d618fa45afa7a1a9775d05cfc74490e5c0ef44ffb6133825d5dda2e124ea5bffb0a423272480a767ebcbeda490f1ac446f8dcd4f69e207a064121726d9bdbbb735ab1d302bb0de61c373c5a6c2219ecb95fa32c2481c6b54254e5b1ccaef0d0aca06f27e42087339cd6b9b30b58ded61f32e5da08d2aedfa8b4d2f89a9586ebdca4da846a144deae0000000000000000"}}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000200)={0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa9}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x8000) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x5) 05:23:34 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x4) 05:23:34 executing program 0: unshare(0x8000400) r0 = mq_open(&(0x7f0000000040)='.selinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/24, 0x18}], 0x1) 05:23:34 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x200000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x141, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:34 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x8000) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000780)) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r5, 0x0, 0x8000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r6, r7, 0x0, 0x8000) ioctl$sock_rose_SIOCDELRT(r7, 0x890c, &(0x7f0000000700)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$tipc(r5, &(0x7f0000000480)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0xe7cacd110c8a78f8}, 0x1}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000140)="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", 0xfb}, {&(0x7f0000000240)="ecc95f739b60427605921006162db6c5e4fbde21aa58be2bb2ef52ac1a11089db07db8ad292f00d66db6e201ae08d174e07c83c796e2f889cdd8ebde3ef2ec300ebbbc479ed531a80fec7d80183e98259b86d83ad8ca0392c36bc21c3308d9562e6e400779952430dc5c2357ed4de805c309e4548a61e03f23a1de2d4b1d457e9ee47e3a50bfb0a94b398cc5932e797440cf27398eba384eaf6b344c8d74668a310d2b92a6660f777172b64c854c3e015f43eed2bc90cc2675e72d94754b5ed7ccd5f4ee622a89a80a9af632668a534b0944eff809e021a0669a4b193539b0", 0xdf}], 0x2, &(0x7f00000003c0)="a385cac9bc89b06af369f6532b4d798db8a7a01d56c4eb48538a8b308b2e4d5b353f4073b131da26c013f741b6b5add30ac4065263ef89887671e54a622623b139268666f9079ea0d1099f50977aefbdbbf350c2c8327cc2564c6e10d09089db27d42ffa3e8b4e27b2efc81f52c729571f518ee11864b44de9f38f5096214158c64a4bfca1b18e5dbc5736a621405d37969e5bc8c754825f4484b818c7420436f573b2", 0xa3, 0x4042853}, 0x4008801) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) syz_mount_image$jfs(&(0x7f00000004c0)='jfs\x00', &(0x7f0000000500)='./file0\x00', 0x200, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="76b41a2ae24687a0bd1426a989d9fcae340531424d104a188367ec1f648042fe23d14512a8870a5dad8d36c7d20694d4a641a423295c78b11918616126b4895e9f1d91a511f073733386dccfb96ed20e831c6d79a3f77aa0d8f80df1878bb4e937c7ca1d56c5c96a5d6ca70ec20b9a131c6df89c19874f19d68e0bd9e31a5b8bbdcee93df1e72c1ca136879d66a91fa7f2a80c1c279df27f9405e6ab74ba6416aa543592ff62021f0876ae91043b77ce60d3579ef90a61c59f32367e37830d4d562cf944c5", 0xc5, 0x1}], 0x2000, &(0x7f0000000680)=ANY=[@ANYBLOB="00000d09007193cbd7d202e1f7c782fe00", @ANYRESHEX=r9, @ANYBLOB="2c726573697a652c71756f74612c756d61736b3d3078303030d43030303030303030303031642c686173682c6f626a5f726f6c653d2c6673636f6e744548af956578743d726f6f742c00"]) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:23:34 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x227c, 0x0) 05:23:34 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x27) 05:23:34 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x300000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 05:23:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x142, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_procfs(0x0, &(0x7f0000000880)='mounts\x00') fstatfs(r1, &(0x7f0000000000)=""/15) 05:23:35 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0xf0) 05:23:35 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x400000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:35 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0xf31a9b4c38e6c731, 0x0) r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0) syncfs(r3) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r4, &(0x7f0000000380)) r5 = dup(r4) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@local, @in6=@remote}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000440)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, r6}, 0x4) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f00000000c0)={r8}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000005c0)={r8, @in={{0x2, 0x4e24}}, 0x2, 0x7fff, 0x3, 0x8e1e, 0xe66}, &(0x7f0000000680)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r8, 0x40, 0x30}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r8, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000200)=0x84) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000280)) [ 537.179045][T27848] validate_nla: 8 callbacks suppressed [ 537.179072][T27848] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 537.237484][T27869] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000400)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000080)) 05:23:35 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x1a0) 05:23:35 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x500000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x143, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:35 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r2, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000140), &(0x7f0000000180)=0x30) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:23:35 executing program 0: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) exit(0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) setxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0, 0x0) [ 537.675836][T28079] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(0xffffffffffffffff, r7, 0x0, 0x8000) accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 05:23:36 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x600000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:36 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x2000) 05:23:36 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x400, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:23:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x144, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:36 executing program 0: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) exit(0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) setxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0, 0x0) [ 538.188686][T28108] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:36 executing program 2: r0 = getpid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000000380)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r0, r1, 0x0, 0x5, &(0x7f0000000100)='stat\x00'}, 0x30) sync_file_range(r2, 0x0, 0x5, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='stat\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x5, 0x0) readv(r4, &(0x7f000004ffe0), 0x0) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) epoll_create(0xc1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000240)={{0x32, @multicast1, 0x4e21, 0x4, 'lc\x00', 0x30, 0x5, 0x39}, {@remote, 0x4e24, 0x3, 0x1, 0x0, 0x1ff}}, 0x44) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) setsockopt$inet6_MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x4e22, 0x1f, @empty, 0x6}, {0xa, 0x4e21, 0xdd, @rand_addr="5903ed610b0ac109af49a384bc6220b1", 0x100}, 0x9, [0x207e0d86, 0x2, 0x9b, 0x4, 0x100000001, 0x800000000000, 0x10001, 0x7fffffff]}, 0x5c) [ 538.243501][T28198] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:36 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x2700) 05:23:36 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x700000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x145, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) [ 538.547794][T28229] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:36 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x4000) [ 538.609923][T28286] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:36 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0xa00000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(0xffffffffffffffff, r7, 0x0, 0x8000) accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 05:23:37 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x88601, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xbc, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r2, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:23:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x146, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:37 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0xf000) 05:23:37 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x1000000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:37 executing program 0: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07003506000002000000070600000ee60000bf150000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad430100000000009500000000000000050000000000000095000000000000004161972070f945a64a9787d389ab8d99de425dc85e2d6518d3cd0aa73945d1e329d681022decca32e540b7ba57b89aa75e7502e40cc19c2e8184f7f8ccb93e80c7cb7661df95bb270e3146c8f18313db7e1d7a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) exit(0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) setxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0, 0x0) [ 539.134399][T28460] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:37 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x200000) 05:23:37 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000000)={0x0, @speck128}) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r0, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000140)={0x2, "8bde67c25ac0cc7e8b11a9207507ef41303a40a8bdba21e1af67cab4a366cdc1", 0x4, 0x10, 0xf9264ba, 0x100, 0x1, 0x2, 0x1, 0x1ff}) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:23:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x147, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:37 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x1800000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 539.423634][T28575] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:37 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0xf0ffff) 05:23:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x148, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) [ 539.722400][T28693] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x8000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(0xffffffffffffffff, r7, 0x0, 0x8000) accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 05:23:38 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x2a01000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:38 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000380)=""/4096, &(0x7f0000000000)=0x1000) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:23:38 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x1000000) 05:23:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x149, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:38 executing program 0: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) exit(0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) setxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0, 0x0) 05:23:38 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) fcntl$setstatus(r1, 0x4, 0x800) 05:23:38 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x4000000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x14a, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:38 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x2000000) 05:23:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x14b, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:38 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x4800000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 05:23:39 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x4000000) 05:23:39 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x1a}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) socketpair(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r3, r4, 0x0, 0x8000) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)={0x0, 0x7ff, 0x1619, &(0x7f0000000180)=0x9}) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000140), 0x4) 05:23:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x14c, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:39 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x4c00000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:39 executing program 0: r0 = socket(0x11, 0x80a, 0x0) read$alg(r0, &(0x7f00000001c0)=""/83, 0x53) 05:23:39 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r2, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) 05:23:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0}, 0x0, 0x80000000000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0xa) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, &(0x7f0000000280)) fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f00000000c0)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0xc, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 05:23:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x14d, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:39 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x6800000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:39 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x27000000) [ 541.323088][T29174] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! 05:23:39 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'veth1\x00', 0x2}) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='pagem)\v\x05\xe9?\xca\xe5\x97\xa6\xd30\xe6\x83\x86\xb7\x16\x92\xbep\xe1\x90\xc0.\x05L\xdd\xe0}\xbd\xf4I\x19g\xff\x11v\xbap&\x93\xb2\xbf3\xd0\x19/\xc4\x92\xc6=]H\x81\x9d\x00'/69) sendfile(r2, r3, 0x0, 0x8000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000300)='/dev/snd/midiC#D#\x00', 0x4, 0x100) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000380)='trusted.overlay.nlink\x00', &(0x7f00000003c0)={'U-', 0xb}, 0x28, 0x1) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r4, r6, 0x0, 0x8000) ioctl$KVM_DEASSIGN_PCI_DEVICE(r6, 0x4040ae72, &(0x7f0000000240)={0x7f00000000, 0x5, 0x3, 0x1, 0x7}) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000140)=""/2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') ioctl$KDDISABIO(r7, 0x4b37) sendfile(r8, r9, 0x0, 0x8000) ioctl$sock_inet_SIOCGIFADDR(r9, 0x8915, &(0x7f0000000180)={'team_slave_0\x00', {0x2, 0x4e21, @local}}) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f00000002c0)='cpu.stat\x00', 0x0, 0x0) sendfile(r1, r7, 0x0, 0x8000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) signalfd4(r6, &(0x7f0000000280)={0x100000000}, 0x8, 0x1ed467c0d8f035f4) r11 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r11, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:23:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 05:23:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x14e, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:40 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x40000000) 05:23:40 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x6c00000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:40 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x310, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x0, 0x1000, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) open$dir(&(0x7f00000003c0)='./file0\x00', 0x84800, 0x100) openat$zero(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/zero\x00', 0x100, 0x0) dup3(0xffffffffffffffff, r1, 0xbd9e5b609b26a37a) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') open(&(0x7f0000000080)='./bus\x00', 0x1141042, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x80001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'batadv0\x00'}) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000040)=""/31) 05:23:40 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x5, 0x800) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) 05:23:40 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0xa0010000) 05:23:40 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5000001) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x2f}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000000380)) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000140)=""/146, 0x92}], 0x1) 05:23:40 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x7400000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x14f, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:40 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0xebffffff) 05:23:40 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x7a00000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 545.290528][T29483] validate_nla: 11 callbacks suppressed [ 545.290540][T29483] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 545.408381][T29537] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r7, r8, 0x0, 0x8000) accept4$netrom(r6, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 05:23:43 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0xf6ffffff) 05:23:43 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r0, r1, 0x0, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x8a, &(0x7f0000000180)=""/138, 0x41100, 0x1, [], 0x0, 0xb, r1, 0x8, &(0x7f00000003c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xf, 0x200, 0x10000}, 0x10}, 0x70) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r3, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/128, 0x80}], 0x1) timer_create(0x7, &(0x7f000004c000)={0x0, 0x19, 0x1}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:23:43 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x8000000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:43 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x310, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x0, 0x1000, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) open$dir(&(0x7f00000003c0)='./file0\x00', 0x84800, 0x100) openat$zero(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/zero\x00', 0x100, 0x0) dup3(0xffffffffffffffff, r1, 0xbd9e5b609b26a37a) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') open(&(0x7f0000000080)='./bus\x00', 0x1141042, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x80001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'batadv0\x00'}) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000040)=""/31) 05:23:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x150, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) [ 545.572474][T29657] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x151, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:43 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0xfeffffff) 05:23:43 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x85ffffff00000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 545.843249][T29779] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:43 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000002c0)="11fca50d5e0bdfe47bf070") mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r2) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 545.915750][T29786] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x152, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:44 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x9800000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 546.086167][T29890] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 546.129600][T29892] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:44 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1b) 05:23:44 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0xfffff000) 05:23:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x153, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:44 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0xff00000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:44 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000140)=0x1e, 0x4) r2 = getpid() tkill(r2, 0x1000000000013) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x3, 0x3, 0x66, 0x3, r2}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x4, 0x0) readv(r3, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:23:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r6, r7, 0x0, 0x8000) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) [ 546.605388][T30006] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x154, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:44 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0xff0f000000000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:44 executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockname(r0, 0x0, &(0x7f0000000140)) 05:23:44 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0xffffffeb) [ 546.909549][T30130] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 546.961061][T30216] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:45 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x100000002, 0x70, 0xf70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 05:23:45 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0xffffffff00000000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x155, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:45 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0xfffffff6) 05:23:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x156, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:45 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0xffffffffa0010000}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:47 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="01a143e239726175de997e6e4108b6a1bec52cd5f0774c591d2590638aa001c2607d85fd7cb9295c5582c78c694f13f26f7b304913376d76d9027c8f395650fe8ae398e109849203ee366b4a2cfa424541a192f542d80c6caeed929be6136d9e40d5e272eafab28fd734bb0f07930c3f1b9a46f5a1d8273144e7c8034e2a6e72f48c228abd9def33ec840a8bf9c1694a11c634831cd9bf11d3a191f19455da4f0ce76efe4ba6263ce7239b6039367eb95121bb36dc9c50f167c0503723ae9b47123c284d82572303a7369f0dd63b6277ef4c84", 0xd3}], 0x1, 0x8) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:23:47 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) sendto$inet(0xffffffffffffffff, &(0x7f00000001c0)="7d2a76e167f9f78b28db349f3380a0568810282629868825b687c3faadee1c653bda9bbf140b8d3a6c7eacc814ddb9442f987ea3f7768d02573e868e7378a0cbfb416cedb8f094380e6fad1dd9d880a61d40fa9f3a058e01b714b71305e77b39a6d8a59f2cd7b7a75680b55b6da2ed5486e521625c12077eeb18b36e262a79d2df0a81d2ec804e16dd5663df6decdad7453e3be96f7977f0361d5ca9c095778ace99b6ad35595b14d428d197f311697a0699d66b343b234e840bd858e503c9b8bf0b447cc273e07012825fa821192470138ee55cd9363c9b2e656629d62791157ee5aa", 0xffffffffffffff3f, 0x240037bd, 0x0, 0xb866b7b35cd2cc5b) 05:23:47 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0xfffffffe) 05:23:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x157, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:47 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r6, r7, 0x0, 0x8000) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 05:23:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x158, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:47 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x1a0ffffffff) 05:23:47 executing program 0: r0 = mq_open(&(0x7f0000000040)='.selinux\x00', 0x0, 0x0, 0x0) mq_notify(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/24, 0x18}], 0x1) 05:23:47 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x159, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:47 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="448cd1c81eab00f29589cd8df5b41734024e21f6eb75c7c496d292d11ac9", @ANYRES16=r2, @ANYBLOB="000000000000ffdbdf2511000000300001000800020000000000080009001f000000080005000400000014000300fe8000000000000000000000000000aa"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4c000) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xac, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3f}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x80000001}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4d}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x87}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0xac}, 0x1, 0x0, 0x0, 0x8c4}, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:23:48 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f00000000c0)='hfsplus\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=ANY=[@ANYBLOB='force,decompose,barrier,force,nls=m']) 05:23:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f00000002c0)={0xb, 0x103, 0x2, {0x3, 0x8, 0x7c, 0x8}}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r4, 0x0, 0x8000) open$dir(&(0x7f0000000300)='./file0\x00', 0x10002, 0xac) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, &(0x7f0000000000)={0x2, 0x0, 0x102, 0x0, {0x1, 0x0, 0x808000, 0x401}}) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000ffffffee00"/72], 0x48) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x7}}, 0x0) 05:23:48 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x1000000000000) 05:23:48 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x15a, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) [ 550.341948][T30722] validate_nla: 7 callbacks suppressed [ 550.342003][T30722] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0xffffffffffffffa6}, 0x10000015a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r6, r7, 0x0, 0x8000) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='zt;j\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000096}, 0x14000000) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 05:23:48 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x20000000000000) 05:23:48 executing program 0: setrlimit(0x7, &(0x7f000000f000)) socket$key(0xf, 0x3, 0x2) 05:23:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x15b, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:48 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r1, &(0x7f000004ffe0)=[{&(0x7f00000000c0)=""/128, 0x2ee}], 0x2000000000000287) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) timer_create(0x4, &(0x7f00000001c0)={0x0, 0x11, 0x3}, &(0x7f0000000240)=0x0) timer_getoverrun(r3) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x77359400}, {r4, r5+30000000}}, &(0x7f00000002c0)) write$P9_RREADLINK(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1000000017020007002e2f6669686530"], 0x10) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19}, &(0x7f000004cffc)) clock_gettime(0x0, &(0x7f0000000000)) timer_create(0x4, &(0x7f0000000180)={0x0, 0xf, 0x3}, &(0x7f0000000240)=0x0) timer_getoverrun(r6) timer_settime(r6, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}}, 0x0) [ 550.743986][T30846] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:48 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0xf0ffffffffffff) 05:23:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x15c, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) 05:23:48 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:23:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x156, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) [ 550.981179][T30958] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 05:23:49 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup\x00\x00\x00\x00\x00\x00\x00', 0x48, 0x100000000000000) [ 551.094660][T31016] netlink: 'syz-executor.0': attribute type 9 has an invalid length. 05:23:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x15d, &(0x7f0000002000)=[{&(0x7f000000dfaa)="550000001e007f5f00fe01b2a4a280930a06000100000001000000003900090035004000060000001900154002000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @empty, 0x443b}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001cc0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, &(0x7f0000002280)=[{0x0}, {&(0x7f0000001d80)}, {&(0x7f0000001e80)}, {&(0x7f0000002040)}, {&(0x7f00000020c0)}, {&(0x7f00000021c0)="d570c75169572b402f625904b5762bfa7cd426628915db97dde3d10c68ae2ca3bf77d1b7b55bce20858e5546a4bfc6b676971a6b9a70addfed54fdde708c5c47287825764bfe33c7dfcda478c532afbdb16562434a0feaf4f9514a35f294091ad55e9549fc5c4dcda587a10dda5f258714162a9b627364e30f1357caa3388d9351db63421380325cdeaefe6031a78464d676ec164d1a26d83d2905b0f45dffdcbe53b8e08e8809", 0xa7}], 0x6}}], 0x4, 0x5) [ 551.288932][T31074] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 551.530741][T31081] ------------[ cut here ]------------ [ 551.536656][T31081] WARNING: CPU: 1 PID: 31081 at kernel/time/posix-cpu-timers.c:401 posix_cpu_timer_del+0x2f0/0x3b0 [ 551.547323][T31081] Kernel panic - not syncing: panic_on_warn set ... [ 551.553907][T31081] CPU: 1 PID: 31081 Comm: syz-executor.2 Not tainted 5.3.0-rc6-next-20190830 #75 [ 551.563014][T31081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 551.573064][T31081] Call Trace: [ 551.576370][T31081] dump_stack+0x172/0x1f0 [ 551.580705][T31081] ? posix_cpu_timer_del+0x2e0/0x3b0 [ 551.586107][T31081] panic+0x2dc/0x755 [ 551.590037][T31081] ? add_taint.cold+0x16/0x16 [ 551.594712][T31081] ? printk+0xba/0xed [ 551.598691][T31081] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 551.604142][T31081] ? __warn.cold+0x14/0x3c [ 551.608556][T31081] ? __warn+0xd9/0x1d0 [ 551.612623][T31081] ? posix_cpu_timer_del+0x2f0/0x3b0 [ 551.617903][T31081] __warn.cold+0x2f/0x3c [ 551.622141][T31081] ? report_bug.cold+0x63/0xad [ 551.626902][T31081] ? posix_cpu_timer_del+0x2f0/0x3b0 [ 551.632188][T31081] report_bug+0x289/0x300 [ 551.636610][T31081] do_error_trap+0x11b/0x200 [ 551.641200][T31081] do_invalid_op+0x37/0x50 [ 551.645610][T31081] ? posix_cpu_timer_del+0x2f0/0x3b0 [ 551.650900][T31081] invalid_op+0x23/0x30 [ 551.655141][T31081] RIP: 0010:posix_cpu_timer_del+0x2f0/0x3b0 [ 551.661030][T31081] Code: 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 b5 00 00 00 48 83 bb c8 00 00 00 00 74 16 e8 00 58 0d 00 <0f> 0b e9 87 fe ff ff e8 c4 38 48 00 e9 dd fd ff ff e8 ea 57 0d 00 [ 551.680640][T31081] RSP: 0018:ffff888062957a30 EFLAGS: 00010093 [ 551.686710][T31081] RAX: ffff888095dc0640 RBX: ffff8880a4761000 RCX: 1ffff11012bb81da [ 551.694676][T31081] RDX: 0000000000000000 RSI: ffffffff8164fe10 RDI: ffff8880a47610c8 [ 551.702737][T31081] RBP: ffff888062957ac0 R08: 0000000000000002 R09: ffff888095dc0ed8 [ 551.710706][T31081] R10: fffffbfff138aef8 R11: ffffffff89c577c7 R12: ffff8880a062a6c0 [ 551.718674][T31081] R13: 1ffff1100c52af47 R14: ffff888062957a98 R15: ffff8880a4761058 [ 551.727110][T31081] ? posix_cpu_timer_del+0x2f0/0x3b0 [ 551.732405][T31081] ? lock_acquire+0x190/0x410 [ 551.737083][T31081] ? thread_cpu_clock_getres+0x90/0x90 [ 551.742551][T31081] ? thread_cpu_clock_getres+0x90/0x90 [ 551.748006][T31081] exit_itimers+0xdb/0x2e0 [ 551.752427][T31081] do_exit+0x1980/0x2e60 [ 551.756671][T31081] ? get_signal+0x392/0x2500 [ 551.761276][T31081] ? find_held_lock+0x35/0x130 [ 551.766041][T31081] ? get_signal+0x392/0x2500 [ 551.770632][T31081] ? mm_update_next_owner+0x640/0x640 [ 551.776007][T31081] ? lock_downgrade+0x920/0x920 [ 551.780862][T31081] ? _raw_spin_unlock_irq+0x28/0x90 [ 551.786065][T31081] ? get_signal+0x392/0x2500 [ 551.790651][T31081] ? _raw_spin_unlock_irq+0x28/0x90 [ 551.795855][T31081] do_group_exit+0x135/0x360 [ 551.800455][T31081] get_signal+0x47c/0x2500 [ 551.804876][T31081] ? lock_downgrade+0x920/0x920 [ 551.809739][T31081] do_signal+0x87/0x1700 [ 551.813979][T31081] ? __kasan_check_read+0x11/0x20 [ 551.818996][T31081] ? _copy_to_user+0x118/0x160 [ 551.823770][T31081] ? setup_sigcontext+0x7d0/0x7d0 [ 551.828807][T31081] ? exit_to_usermode_loop+0x43/0x380 [ 551.834173][T31081] ? do_syscall_64+0x65f/0x760 [ 551.838936][T31081] ? exit_to_usermode_loop+0x43/0x380 [ 551.844307][T31081] ? lockdep_hardirqs_on+0x418/0x5d0 [ 551.849604][T31081] ? trace_hardirqs_on+0x67/0x240 [ 551.854636][T31081] exit_to_usermode_loop+0x286/0x380 [ 551.860725][T31081] do_syscall_64+0x65f/0x760 [ 551.865342][T31081] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 551.871237][T31081] RIP: 0033:0x4598e9 [ 551.875139][T31081] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 551.895270][T31081] RSP: 002b:00007fe17980fcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 551.903694][T31081] RAX: fffffffffffffe00 RBX: 000000000075c078 RCX: 00000000004598e9 [ 551.911688][T31081] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000075c078 [ 551.919658][T31081] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 551.927649][T31081] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000075c07c [ 551.935615][T31081] R13: 00007ffee24a6f0f R14: 00007fe1798109c0 R15: 000000000075c07c [ 551.945477][T31081] Kernel Offset: disabled [ 551.950098][T31081] Rebooting in 86400 seconds..