x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2459.652599][ T867] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:55:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r3, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r5, 0x4122, 0x0) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:55:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0xff7f000000000000) 13:55:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x0, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:55:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2460.149467][ T989] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:55:50 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x1, @time}) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) ioctl$KDMKTONE(r1, 0x4b30, 0x64e7) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045301, &(0x7f0000000240)) r2 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={&(0x7f0000000300)="1c8a635c3c8d8fc926db7086f3d6d0ca862b779dba650a87dbb6a01aa85ae822aa33c5cfcdcaddbefa522e5e2242957a57c4da2a96d8fbae18850974da1294f48bac1459b392b9658feb691708bcdad9c14a4e64e5b8094a5936821b0973ec650df9c1eee05b474416286d06bd10d4ac1cd700e73dfec00d17accb9ff24a8486c99ecbab23", &(0x7f00000003c0)="d636ed1e012fce7b21b6b2b5f2aca0eacab62c4608b31226dafe4478aaa23e6460de61bec8c9d325454b99413f6c820268bc2516d897fd3ae162639b5a7147e97c3c79eca4f6aafc0ec5eddb695906f7cf446246282052b04824e4dba918dcc718b4884cc656067108197a9770e61a4e7a9632155089b40b0545e00ae80d44b261d1616f78684fa11dc46b7498b7efa74f800725468dc26aae272ce0efd5ccb23f55bb7a17eebf9b147e485b0df5268fa957b7d0"}}, &(0x7f00000002c0)=0x0) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000140)) timer_settime(r3, 0xced9937868ad5ff8, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 13:55:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x0, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:55:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0xffff030000000000) 13:55:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r3, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r5, 0x4122, 0x0) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2460.718650][ T1009] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:55:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x0, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:55:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0xffffff7f00000000) 13:55:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:55:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x0, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2461.205078][ T1128] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:55:51 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045301, &(0x7f0000000240)) r1 = gettid() r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) accept(r2, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r4 = accept(r3, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000040)={{r4}, 0x4bc, 0x7fff, 0x2}) timer_create(0x0, &(0x7f0000000140)={0x0, 0x12}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 13:55:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0xffffffff00000000) 13:55:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x0, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:55:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r3, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r5, 0x4122, 0x0) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2461.646714][ T1247] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:55:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x0, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:55:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r3, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r5, 0x4122, 0x0) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:55:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0xffffffff85000000) 13:55:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x0, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:55:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:55:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x0, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:55:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000180)={0x4, @raw_data="93236addcc67eb1bb79ae56adc59dfc7d9eec98b0bfc8230948b7c98f82000949656035a707e2ad16846ddff7dff4c57e4e130dfe5f6637c86b7f8bcc5ca9ae3690c4e3b04a73fa04bcfab375d9b759d42d7ec532f1dbe21529b5d5c8de53947cad67dcdbcc651046ca9b406c9b182a547233d186416f321a4ea960fcf2ef8eb4ff23a0bfb502ac4a5ce33b0323269e5ca7b7b9ed6debb4b7af87e6c916a043d960dda0a811b95312d74414b4403f968829b49c13be0009d40ff6fef920abb426dd2839110bc177f"}) 13:55:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r3, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r5, 0x4122, 0x0) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:55:52 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0xe1940) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045301, &(0x7f0000000240)) r1 = gettid() timer_create(0x1, &(0x7f0000000100)={0x0, 0xe, 0x5, @tid=0xffffffffffffffff}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 2462.583075][ T1604] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:55:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x0, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:55:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r3, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r5, 0x4122, 0x0) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2463.025830][ T1604] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:55:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x0, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:55:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:55:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x0, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:55:53 executing program 4: getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xe) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000228bd7000fddbdf250f00000008000500088e00000c20020008000400018000000800060080000000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xffffffffffffff7d, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000300)) [ 2463.514235][ T1738] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:55:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r3, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r5, 0x4122, 0x0) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:55:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:55:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r3, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r5, 0x4122, 0x0) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2463.934304][ T1860] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:55:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r3, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r5, 0x4122, 0x0) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:55:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0x0, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:55:55 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045301, &(0x7f0000000240)) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000002c0)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r3 = accept(r2, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000040)=[@timestamp, @mss={0x2, 0x9}, @sack_perm, @sack_perm, @mss={0x2, 0x4}, @mss={0x2, 0x7fff}, @mss={0x2, 0x2}], 0x7) timer_settime(0x0, 0x2, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r5 = accept(r4, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r5, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x24, 0x1, 0x6, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8d2ed1c51dba81fa}, 0x0) tkill(r1, 0x1000000000013) 13:55:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100e93274aca9969ca7df4a500050700"/31, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c0001006d6163766c616e000c00020006000200000000000a0005000400000000000000"], 0x48}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r2 = accept(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000100)=0x3) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r4) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r9 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r9, r7, r8) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x0) splice(r10, 0x0, r12, 0x0, 0x80000001, 0x0) statx(r10, &(0x7f0000000280)='.\x00', 0x400, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r14 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r17 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r17, r15, r16) r18 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r19) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f00000004c0)=0xe8) r21 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r22) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r24, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x1, &(0x7f0000000140)=[r25]) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000010001000000000002000600", @ANYRES32=r4, @ANYBLOB="10", @ANYRES32=r5, @ANYBLOB="02000000", @ANYRES32=r7, @ANYBLOB="02000100", @ANYRES32=r13, @ANYBLOB="02000300", @ANYRES32=r15, @ANYBLOB="02000200", @ANYRES32=r19, @ANYBLOB="02000200", @ANYRES32, @ANYBLOB="02000700", @ANYRES32=r20, @ANYBLOB="02000400", @ANYRES32=r22, @ANYBLOB="02000400", @ANYRES32=r23, @ANYBLOB="040002000000000008000100", @ANYRES32=r25, @ANYBLOB="10000300000000002000010000000000"], 0x7c, 0x1) 13:55:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r3, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r5, 0x4122, 0x0) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:55:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:55:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:55:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0x0, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:55:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:55:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r3, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r5, 0x4122, 0x0) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:55:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:55:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:55:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x400201, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r3) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x1, &(0x7f0000000140)=[r5]) write$FUSE_ENTRY(r1, &(0x7f0000000180)={0x90, 0x0, 0x1, {0x4, 0x0, 0x1b57525d, 0x0, 0x4, 0x1f8f, {0x5, 0xfffffffeffffffff, 0x400, 0x2, 0x9, 0x1, 0x7, 0x3, 0x6, 0x9d, 0x8, r3, r5, 0x6, 0xbb}}}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) 13:55:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0x0, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:55:58 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x1, @time, 0x0, {}, 0x20}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045301, &(0x7f0000000240)) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) get_thread_area(&(0x7f0000000040)={0xfffffffc, 0x100000, 0x1000, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1}) tkill(r1, 0x1000000000013) 13:55:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:55:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x0, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:55:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000001000000007922312b3428b6c847afb621d274011c0012000c0001006d6163766c616e000c00020006000200000000000a0005000400000000000000"], 0x48}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r2 = accept(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000140)=0x3dd5, &(0x7f0000000340)=0x2) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20004140}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb0, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_hsr\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_hsr\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gre0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x6}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:pinentry_exec_t:s0\x00'}]}, 0xb0}, 0x1, 0x0, 0x0, 0x18}, 0x8004440) 13:55:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:55:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x0, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2468.839002][ T2254] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:55:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x0, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:55:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r3 = accept(r2, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x20, 0x501300) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000001c0)={0x0, &(0x7f0000000180)=[r3, 0xffffffffffffffff, r4, r0, r5]}, 0x5) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) r6 = socket(0x4, 0x1, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000240)=r7) sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xa, &(0x7f00000002c0)={&(0x7f0000000340)={0x48, 0x2, 0x9, 0x800, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x7}, [@NFCTH_POLICY={0xc, 0x4, {0x8, 0x5, 0x7f}}, @NFCTH_QUEUE_NUM={0x0, 0x3, 0x140000}, @NFCTH_POLICY={0xc, 0x4, {0x8, 0x5, 0x8}}, @NFCTH_STATUS={0x8, 0x6, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4080}, 0x10) 13:55:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2469.358253][ T2376] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:55:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x0, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:55:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2469.492661][ T2480] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:55:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x0, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:00 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000}, &(0x7f0000000200)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="64f9760d4e393255f5480000001037a6536a82286fdf00050700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c0001006d6163766c616e000c00020006000200000000000a0005000400000000000000"], 0x48}}, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x100, 0x0) 13:56:00 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045301, &(0x7f0000000240)) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f0000000040)={0x6, 0xd6, 0x1, 0xfffffffd, 0x10001, 0x6, 0xd8}) 13:56:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:00 executing program 4: openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x20041, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000ff0f00000000004000000700000000c065", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c0001006d6163766c616e000c00020006000200000000000a0005000400000000000000"], 0x48}}, 0x0) 13:56:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r3, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r5, 0x4122, 0x0) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x7fffdf00f000, 0xa, 0x10, r1, 0x0) r2 = socket(0xa, 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) r6 = socket(0xa, 0x4000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x11, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1000000, 'lblcr\x00'}, 0x2c) r7 = socket$inet_tcp(0x2, 0x1, 0x0) fstat(r7, &(0x7f0000000300)) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000001600)={0x0, @remote, @empty}, &(0x7f0000000100)=0xfffffe78) ioctl$sock_inet_SIOCGIFPFLAGS(r6, 0x8935, &(0x7f00000003c0)={'veth1_to_team\x00', 0x9}) setsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={r8, @remote, @loopback}, 0xc) ioctl$FICLONE(r1, 0x40049409, r2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000480)={'team0\x00', r8}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_deladdr={0x30, 0x15, 0x4, 0x70bd28, 0x25dfdbff, {0x2, 0x18, 0x10, 0xfe, r8}, [@IFA_LOCAL={0xfffffff0, 0x2, @loopback}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_LOCAL={0x8, 0x2, @empty}]}, 0x30}}, 0x82a8c6c19cee36bf) 13:56:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x0, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r3, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r5, 0x4122, 0x0) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2470.834912][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2470.840702][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:56:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:01 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045301, &(0x7f0000000240)) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r4, 0x1000000000013) 13:56:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r3, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r5, 0x4122, 0x0) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x0, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x0, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) pipe(&(0x7f0000000000)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x2a600, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010800000000084) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000000)={r4}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={r4, 0x0, 0x101, 0x20000}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000000000000000dd8e8e19244046ceb445ab62409d4ccefe70876e0d6556ceae5aca26a32e1162af439a5ed06ae489105f9c0a2d3674b99c3c278b4b9f3540", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c0001006d6163766c616e000c00020006000200000000000a0005000400000000000000"], 0x48}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000040)={{0x4, 0x8f, 0x3, 0xf4, 0x4, 0x6}, 0x3ff}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r7, 0x200, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x943a8787841067ae}, 0x4000800) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x62000240}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r7, 0x0, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80002}, 0xc4004) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r8 = accept(r5, 0x0, 0x0) sendmmsg$inet6(r8, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r9, 0x400448c9, &(0x7f0000000040)={{0x4, 0x8f, 0x3, 0xf4, 0x4, 0x6}, 0x3ff}) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r10, 0x200, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x943a8787841067ae}, 0x4000800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r10, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x8, 0x5, 0x6}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8084}, 0x30004004) alarm(0x4) [ 2471.918069][ T3084] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:56:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x0, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2472.095507][ T3119] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:56:02 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x1, @time}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r2 = accept(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000300)={'mangle\x00'}, &(0x7f00000000c0)=0x54) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045301, &(0x7f0000000240)) r3 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000002c0)) openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x2800, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x1000000000013) 13:56:02 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x101000, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) 13:56:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2472.656102][ T3271] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000080)={'syz_tun\x00', 0xfffe}) 13:56:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe(&(0x7f0000000000)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x0, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x0, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2473.045603][ T3290] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:03 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045301, &(0x7f0000000240)) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x2c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r3 = accept(r2, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) r4 = accept$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000140)) 13:56:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) pipe(&(0x7f0000000000)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000010000000000000000000000000000000a7722fbdd1142bc15d86ab6ea4a19f84169bd78a09355590ea74b7cbe6a7cbea498d2a0df0b7c559c00c9b30f9f9722755344fe0972bcafa26bc25dc79d08389bed24f3b4a12ee77d05be5ef678675b58dbac93ae7a59615", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c0001006d6163766c616e000c00020006000200000000000a0005000400000000000000"], 0x48}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_IOCTL(r1, &(0x7f0000000080)={0x20, 0x0, 0x4, {0x21c, 0x0, 0xabc, 0x79}}, 0x20) 13:56:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) pipe(&(0x7f0000000000)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:03 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r1 = accept(r0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0xa, 0x4e21, 0x0, @rand_addr="bde0a514ed5cac19642b5896d7ff2e89", 0x8}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000300)="aadb24886e77a80ec9fd1727e54bba0cfdf049b19ae5f4ae89d21b9073d88d20c4cc36936b25556db1b97a1ab2ce04b09cb1c7e4d24a99382ba0c8619723c0fec89cb73861f0456687f1643ca9106293aea0f1210ebe775c18fca9d5d42a1d08db33e78c127cfb8a3dba4a", 0x6b}, {&(0x7f0000000380)="49b04be75967eba6a42a564bfc9a0cb79b74b5ba140e4559081799035c2310629f6fe0e448c691e120895598e847adfcbf7961cc17c9e37ac75c2a3f1555a45e103dfba84bc8b2830c4e3f290dcb319e82d5289fc98ec4353120ab034bd157705c3251cb2f162f2e138e95fd02d11e549c18da4a5b884c375c14a0f12819b394a869244487e1ed14a87b0864ec0a6a2e292a6c502436f845756fd065ba0b6574c8fd111f0e46882bb863e80dc15a3a4ae2603313085bb7f516fad0ca9434626d4c22859fb79f6f8bf651b4f50fcbbd0a56c45916c1cb8903a4316e7cbb972a8bf90ed1d511e04c60d643eabcecfdb99abe19ab06f43f1e16676a07f2e18d95fbcfad64f6482af6cd67f3811fe0508c9f852b32a8daa43f2da856f807b20500ad87ddb199421507a2a5eb5ecf36c1a450f2da7dd936989f033256d9345e6f1b85876a8f948a8131b03f97136080cdf4e6fcaa4211a8a905a24b97488206b98b48e913e9d2946aedeaaf6a04949305181e82b26cfabd82a6877ee702a12fbee9d64d038b122afbb82bc1db053256ac63809f8ee646fb85e5b31e954d5c6d1f964763f76171e91c5a05b1e77d649c5e7650020ab5b12e947603e7c1b87048ee1fea03ad6a30a923ec99aa509f8cedfbe1f04b843764d1fb5db148d6f7c9e36b77d76e821defeec1fa13de791ecfc72d97d3f7a4e9f65d7f58f56fa04001e4d14973a6bb0af5b88e2512c4f13d23825465231b94799a8ab44f4b3b19adfc39921e904f22ddf98dacefd965d4f7c1694a29c0ac507968d1a3054c082dddc20bdfd206e4a07a6ffb445717604a53820a3299388e629d76219dfe2c3b7d525e94d2f63d9647929c78944faacca1e2441d137127bd9fcefee1dac4f502496d61b8a368b78d6296b5c14f63c711d37febe9ddbba94faed0a2dc0e757f87ec1a1a88fa0b74be9b37320eae08f1015ebe5a279fbd181c8b962affae528b265debc935f3ced38353d5e4c75dc389927dbfba416642bc02ddf7c5b9f65b49ad4a42c7a5a08f89596fc9bf46be10052c513be3d34d9aa101dad24126e6066f82aeded8da2ca15fd009c3f83ce6ab105858ad015c1e1c2bd3dacf12516f843b0d94bcd258e5c1b245a033313af940469def0fbcc8f79c7555a9399ec517b0930bd451b35894d523ce7e258b491d04dc90f2eacac0c47a902090a66faf195bbf82683d34109f2e69e5f259e6a1186a6620bd9c32ae20727c69c9f06c40b8c2f700c5a9944a1ec1f8046f381013e87c69e16019a4225df45b910b3ccc4d6052961dea08de5a04634213de435b240dbfb5179b4d9be87ce0071e00ade0db1450538949e0c514b3e8a72c055e2b95ed9902f62bf27fcf4d115185f04e93676ee54171951fef792b3c90bf8ef022c072211c25b37d997409212f1840b5c5442b712f9a79aea8026a94fd98634cbc5e80ebb85700137b37507da46a85baf18cb3ea93d211c8f6f07c0820d83d0a78363d082f8cac20a9cd39d60d367d05052d97aa891d94b9f2283fcf0bf772982760c02a8e0d29a318e0f067ccc7b874820ba112737cd0f3ce9b0937214c2b865efed42c1fb0bf8bc08875c349fe5f8de49af163a57fcdb9d6c5ccb1c19f46c37d18309227ccf78713de73df6d487dd80ab419358597be232484f463d9fc0c7b3711a477b2e1706d1210f33df1a5b05565f8233afa326af9e16edeba774fb19d25752abe1df56b8efed885daa646fb043f0659e29c4c648cab2337059fb31ca50fe3cb36f615f18008cd34d58c3f9031cc3036f2a8083fce05937f7ddfcb5072c4734d1c728d59d4d547c083b0892f8d4c6bb10c111543c9486e052300f7406a824f503d7c1192cb0a5c33380bfed003c46e9186b67acf74c64a5dc3307d003d4bc33e9cd7da58778c3fc3e1d0e6c9b4bf0d672fad3dec027e44824f38d68ab1b168b7b16bcb2ad250edb8350bfb1b3dd7ce831039b46d92e3a64a2708ea3291c7ddda3800958f8a81cd6241066ad8e58994c8c49dfc1dabe0a8b496aeeb6d092127b8f6c5778189e3e9ff858469a37c2a506c63f91a1fa57db23f5d23e4fe96f77d62895ab7cf9ca701e05b2341401ddede3722bfe29f00d81c9a7dde157f0c172883c3c4fc6508ae08179396abefe8f270356153e11dcfda0d3077e86b83eb56daefeb094355dbb68274879ce078304dd8c4a1a6bc6e1fe9883067afb6e85b223905b3023c07c298968056a9f046d4d1f13491ae113081453699c3f89aeef2c3368faeab6af768e8cf6c8cdb7033c58176356d375188007af6d3c179343286123ff91f87ad506739cfc126babd907b3e65524a847c9421c2ccf6d80e4906947414d7b29de5d416601d7c585e86ef37be5f886355954e81b2c19c6d387903004649bf57d2c69f358bd00f815d6760f014c33a2c73966a5024ed2120d1afef017aff7c8c14b9a6e02df375885b8372e331e9e108092771a56273b3a2fa6a04be360e705feeb669b3de4cfc07c65cee89c0315e085a83208a8da36cf18fa32727fa97e8e843c44f2fe0ce4b221c99c0e8e47914e91e743d364a953cecd64d7d9ea57897e196114a6cf86e63d6aeabba28617c1ca10066c9b3e5d09b1f0ac59555b79c272ba6a092394f7a0b250288cbbb23fa2838b6eb38fdfc684c4b572ce2f839cf93a8fa91265e483a79844aa9c17ef2c34c0b35ca7699d63ef3c21efb2713ca8ea2cf5b16489e7ef60402d6df4dca02059b8d2c6c5a9a61bde0acd55fc33bfafcfc603dad0cdbc075a26d54022dc20ead786c94bec81e7a0e204757e7181259cb75a6f79d68ba3ddd222d1cededc7d0fd0fb640814c8a86781b7d738e143ac00b21e29e98b1f272c4b5ba0dd24f8d53fed30d5b0c61495b93e2aaf334650fb17827237fdb0c04738c29f05a321f517767fae1026369cce11f2c6e071b30b86647026ea1ed10e4382bf15f2d176a5b7cdd9b56c33611238992ec41eb2eb7d150e53fe09e656f77bbfd6332cbfaae88c5edfe7a0cc3706c467ff1f4908574219612e5327c0bc7ef8071efe82cd05c30d0fd70396468b00fe678a2293a3304e4b8f7774e483d8c0f3056949cb364d0f904ff1f51e18b988ed417b9fc9cc5d1110092b447f724d4426acd4abc1c082545b1306933b1c6ad87d294371ca18789400208cdff1ae52602ed3c34da05e8635677ac16f9228bbe2a8734b63176228161dca7afac9c1598aca703d07a0463c5d299496f7677ec1964b40e32ee3311d295d61256a5d4fb41ed1a6b14401154247ad3eca49ab9ea2b31f195adfaa04a349a51f4f30e9ba94397c056a888f279fe61a1474f0c9512927258ecceebca31d5a06aed3c8a0d2de9f06f859ab39ed9b77702afed9a64bef0fc1b27eef2d6f221a81fadd5423f5bf3513b92a20d8d516e589baafc03a6b9421185bc5dc636a96e02a868df064bafd4a87e494e51d5f45b6660d49977b411f072dfcb759f6248ba87962b2ac6f273c5e708df3dbc856881f50b29cb6a333021d1abb619a2e8ff005e1444d863c4d824f6c14c1881c663057b044e1303ca917efc40e1fe53d62dfb2ee41a7b710f6b2a3d208b368d10c3ec84677735dc19f6b0f96a87afa6d9c79ec0cf95aaad2384c8dada577c86f160d3e1434f7fea639d1abbfc3ab26c2829667d4548929c3822a5690f14c2c9e88d11049760ab338fe833c910dbd41c1606b3bf6dc229eda5470504370ea6dbbd19bf289f3dfb98966f774484522f8ee704e969f029d26d7671c3648844184924f64499101a8fd8a5a928d4706701a929be0ad49f9e189ef0b79d7b3d761c8adea005ebe044bea33c5dd35e3a6a8b3a7f8cc6ac4ba0b538dd2489ac6f42fe419910d17f7595a6378a62e00b67f9d3ce42f9891708f05b4776fa1fa1429b9f4572452fd15c847e3dcc74e70b6f647653b5ca47bd737b9d5c4056a0ae52d57db1b7a627002d046b5dfda8f9fe54da88d353e2d4ed161bbf2d00ee391ac7b444ccaffe0d50f038c85c73d10b9a6f11741d0d7aa1d6e9104f99d0899f07f73015b8548b80de295b41b528f74c2c9dc54639ec69efeeac470d47482794dacde156d87fdbd94c09dc38a1dabfacb91369fcd9ec90af953bf5e2d093d75d91af999341e20b7ebc5595c48c57a1a2b5f9363fb9945890958e03282b81e841e92b19eff322271fab1cefaaaeb0832af6680b61e6bcb34170d81ccecbd0264d42e3d41d2a143604c95b393b19f7cd20a4d45e34d433bab9f02d4ad7e6937db31c9e0a07611fb15125c204f30200b90ca55e9f62d5efe048d83a3b8bc9eda11c6555beb54b471030a8920cf3526e31c87f7ac874dffa712ebd2b58ca5dd1c29001de91970d3bd4d7df16e185f25d22bfe4d0e0562cccb05d2195c99c8d3497c8cde688933a8013f5a525fc13192a4f85e0e9f683ebe550ba65f8a5cd512052346db7d45256fdd8ed5666e123273df821ff627c872fa01e9ba8e1b38a5c25a29986118ff0ed3ac071f2e5bae0466dad9359cb6205bb6b4988c405e732fcaefd0bb1cabcff2746a55d27f63936b813b4b251c5ff3506f9d6e68d6e46dc4ff6b58861040ee71f007bdce1add4b5643a486ad2951362052efd9ff5f22ea6b18bba32a9e9eca759cb7753c90abd227d8fbc5224839fb3301f2985f1c3daa2e4b99e35491b7b2a4076f5cb281cf8dec826c0ff57d0e1f834d80dbc7c494744d076f7dd38c278090ef0ccf1a452d29054c0b1cef7fab15fd906c5ecdfd07229fced7dc3027f7025c872fb82b9a6130668021ca337315ddb4804c8d16920c2595470cafed8b666a73b920c50e8696402cbf91a50884840a7a538d1c60472250e23157612e8b3a649362dae6e8ce1aa0ffd2d303d099785adfe67dc975b033453b1cf0db58a89e11a5a47eb27b21f469d5af3fb29a97710f5eb903694096e04807fe0a88f80331bd8b5e1d322f06aa6e7b70fa26f9bcb00e8d4b0af1117d790a4483c97da1a6b28554510adbaf58bb7bafe532d6f2cdf28a63bb15b0de1cd33e9a466d1a57d3d7392d6573fd5a2e06d895367e3949d557c61e6f3b865a445ebc4afee7402e32bee0b0c6bddd617b584613b9e979cb196f64d3cc8aabc1fee2ab823d174ce6c0101137f8a58eaaee4c47429b5f92222a1e24515a9bad4bcf432dcf3091e81f8f5e7a82358357063751315c786394a78a02b46a2acc1ca7c4033c2d38e891c2f1adf4de37a10b1dde6f8186c45d55ae3c90ad315e78bd003557e384495f5fe24912bc02d125d81bc58174d7d0055ee9e810dcc00ab01502057ed98beac2769e17dca66f2c47d8cfaea912bbd7802a7f1fcba4a79d37d7b04a3f4030c5aa828812bbcee239422a2f6d1b8d612f6cff1a67c71e4c08e9971bfdcbdb369fb5edf39e8df4fece10f83031a04ecfd5819236a7d737a8cac3ecc43e8bdbd8009ef4599ab3c9c6161d0991379fa4ffff7594698f68ef33a0a0bd2c9455c35ecf6d040869e3e4f19b41c73c7dd11a848df2498520cb53232a91049ad8987a82dc7ea433d9dcb22bb0a75e2f1b4d2fa03b3097652d9ee1b813115b2b9abbae48bbf63710cf1a939376e9e651d4ed08883855c8116e07ab954a867ef824f0ff405e909d7da53eed34511694476175ce63a60392d2f816c73c5f5e3c7a17fb16cbd48fe2da40529495f0dfbe9ba8559b891d8fdafb221256f9fc48b82fe1ff9b541348bea5b9846f1782742095dafb3f2303d97b2c007d8ba56ff2c7da52a2569a620ac5a7a8797cb2bacb64c91067917a6642407564addcae022", 0x1000}, {&(0x7f0000001380)="079b83cda5e799568555285b5fcf2e36eacf74cc22798b109994104c1172e771a31e438b97d173b1c04cd303e7c5005d80005a881a65fd20ae44790174c1fd40fbc7b50e1984a1d6c59e8b89727fb2291b13da10115c8799bafeb116746f1a27dc7981e977b6eca240e4fb875e082d683e0df682225c1508023fe601e12bbe534707f45af753c98318f4fa43ac9215d446c339aaff0b2b79bd99037dffe52538a9f450f059e23123172a8fccfb66473db59479f2f69277cecf4ccbf620d7772aee482d461bf42cca916e09eaaf766868f73766fa178f6eb4666b5bd803f7455fdbe7f788263cbc43ecc706ccb480e8d5bc78", 0xf2}], 0x3, &(0x7f0000000140)=[@tclass={{0x14, 0x29, 0x43, 0x7}}], 0x18}, 0xfdce6d7692e4ba0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0x80045301, &(0x7f0000000240)) r3 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x1000000000013) 13:56:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, &(0x7f0000000080)={0xe2, 0x100000000, 0x2}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c0001006d6163766c616e000c0002000600020000000000e3f1e5b541ef5b2500000000"], 0x48}}, 0x0) 13:56:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe(&(0x7f0000000000)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x0, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c0001006d61637682c0a6b7895f581f06000200000000000a0005000400000000000000"], 0x48}}, 0x0) 13:56:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) pipe(&(0x7f0000000000)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2474.238730][ T3687] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2474.280634][ T3687] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 13:56:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r1, 0xc0044dff, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) 13:56:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r6, 0x4122, 0x0) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r5, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2474.632387][ T3809] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe(&(0x7f0000000000)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2474.790504][ T3817] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:05 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) accept(r1, 0x0, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0x80045301, &(0x7f0000000240)) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) openat$cgroup_ro(r3, &(0x7f00000006c0)='memory.events\x00', 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x8, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x113, 0x3, @tid=r6}, &(0x7f00000001c0)) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r8 = accept(r7, 0x0, 0x0) sendmmsg$inet6(r8, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) r9 = socket$inet6(0xa, 0x1, 0x8010800000000084) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000000000)={r11}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000380)={r11, @in={{0x2, 0x4e1f, @loopback}}, 0xffff, 0x4}, &(0x7f0000000100)=0xffffffffffffff51) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f0000000440)={r12, 0xf3, "08de97a9c00f8b6e0031feaf0ea5993ee386239b90ad823ce561a2e9bb6b833a6d0e65d20f495f0b018fd3097ba4f5a54ff8eef621eae0ceb135eb0c14388ab32376fed52f6ae1bc8463600baf0da7fab84135778c5ec75dbba5ca7f83a6524c716603875f4f821b8b84fca773ab844f6bd47bf93da0f886b41fe42218b1dcdcc80763dd4fee060ec7bb891fe9d91c6feea3590296c5ee98c3c045efa330168c0aada5520f72a6114bb98866944d5118434f45e5a4ae6c2898fda1242e42e6abc72227b427e3101c8a89bf87a8c11f20d207e651ecf0639c57a5c19f1b6d596476827eca6bc94affc7abbb270eb6eb0d50856a"}, &(0x7f00000002c0)=0xfb) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r6, 0x1000000000013) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000300)={{0x8, 0x5}, {0x2, 0x4}, 0x8, 0x3, 0x8}) 13:56:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=@known='trusted.overlay.upper\x00', &(0x7f0000000400)=""/167, 0xa7) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x195000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="680000ea6aaa2ac20b32455637cd00ac5e225e73004e510fa4a5adaa91497853a8dc39572f411d49669f3caba86a320875f3be5c3409b9f3856e66aaa8eed803665d2c867728f0e30b426dbfd6021b9a9b9a603f1438991a2faff8ec6769619349cbd497a20f", @ANYRES16=r2, @ANYBLOB="000428bd7000fddbdf25010000000000000007410000004c0018fffffff7696200"/98], 0x68}}, 0x884) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) r5 = accept4(r4, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) perf_event_open(0x0, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000000500)={0x8, 0x80}) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r10 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r10, r8, r9) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000340)={0x9d, 0x6, {r6}, {r8}, 0x1a}) 13:56:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x0, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2475.284273][ T3938] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) pipe(&(0x7f0000000000)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r3, 0x4122, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r6, 0x4122, 0x0) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r5, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) pipe(&(0x7f0000000000)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r3, 0x4122, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2476.076679][ T3940] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x0, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) pipe(&(0x7f0000000000)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r3, 0x4122, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x15) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="48e205f888ff050700"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) 13:56:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r6, 0x4122, 0x0) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r5, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:08 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045301, &(0x7f0000000240)) ioctl$CAPI_SET_FLAGS(0xffffffffffffffff, 0x80044324, &(0x7f0000000040)=0x1) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 13:56:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) getxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=@known='trusted.overlay.upper\x00', &(0x7f0000000400)=""/167, 0xa7) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x195000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="680000ea6aaa2ac20b32455637cd00ac5e225e73004e510fa4a5adaa91497853a8dc39572f411d49669f3caba86a320875f3be5c3409b9f3856e66aaa8eed803665d2c867728f0e30b426dbfd6021b9a9b9a603f1438991a2faff8ec6769619349cbd497a20f", @ANYRES16=r2, @ANYBLOB="000428bd7000fddbdf25010000000000000007410000004c0018fffffff7696200"/98], 0x68}}, 0x884) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) r5 = accept4(r4, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) perf_event_open(0x0, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000000500)={0x8, 0x80}) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r10 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r10, r8, r9) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000340)={0x9d, 0x6, {r6}, {r8}, 0x1a}) 13:56:08 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) pipe(&(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r2, 0x4122, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x0, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x964d99eb7d453caa, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0x14, 0x2, [@IFLA_GRE_REMOTE={0x8, 0x7, @empty}, @IFLA_GRE_LOCAL={0x8, 0x6, @local}]}}}, @IFLA_IF_NETNSID={0x8, 0x2e, 0x2}]}, 0x48}}, 0x0) [ 2478.284180][ T4212] netlink: 'syz-executor.5': attribute type 5 has an invalid length. 13:56:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) 13:56:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) getxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=@known='trusted.overlay.upper\x00', &(0x7f0000000400)=""/167, 0xa7) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x195000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="680000ea6aaa2ac20b32455637cd00ac5e225e73004e510fa4a5adaa91497853a8dc39572f411d49669f3caba86a320875f3be5c3409b9f3856e66aaa8eed803665d2c867728f0e30b426dbfd6021b9a9b9a603f1438991a2faff8ec6769619349cbd497a20f", @ANYRES16=r2, @ANYBLOB="000428bd7000fddbdf25010000000000000007410000004c0018fffffff7696200"/98], 0x68}}, 0x884) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) r5 = accept4(r4, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) perf_event_open(0x0, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000000500)={0x8, 0x80}) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r10 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r10, r8, r9) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000340)={0x9d, 0x6, {r6}, {r8}, 0x1a}) 13:56:08 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) pipe(&(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r2, 0x4122, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2478.554719][ T4322] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2478.717017][ T4330] netlink: 'syz-executor.5': attribute type 5 has an invalid length. 13:56:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000000000000000000000000000000000000c8d9707dc7cc8c56e2674d2bc7e8cc80c2372fe5212a6b1e5387c7ff6f62fab8e946a347b10daeabccb47fbfa4f2946be461c08e1d7c7763818c40267fd2f645b0849d0e6ad4c43347b360672b34844a0952fec7e69f139a02ea7da76368deae8f754ece85f8ceeeb984c01011d66121e72215045c0201c43f2175592a1857da4e1e07c18fbdc79ed8433e48d40bb8f7ad", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c0001006d6163766c616e000c00020006000200000000000a0005000400005ad59a0b26abb56cdc2306e274f3f146ef91d3695d70aa9a5cbf98d192144b96f51f848677c617ce6601eb340211a5d419b4f3afcc2ffdc9b8528e0c63d9f5bf7a1e"], 0x48}}, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000080)={0x9, 0x2}, &(0x7f00000000c0)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r3 = accept(r2, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000240)={'filter\x00', 0x0, 0x4, 0x1000, [], 0x1, &(0x7f0000000140)=[{}], &(0x7f00000004c0)=""/4096}, &(0x7f00000002c0)=0x78) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000200)='lazytime\x00', 0x0, 0x0) 13:56:08 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) pipe(&(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r2, 0x4122, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) getxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=@known='trusted.overlay.upper\x00', &(0x7f0000000400)=""/167, 0xa7) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x195000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="680000ea6aaa2ac20b32455637cd00ac5e225e73004e510fa4a5adaa91497853a8dc39572f411d49669f3caba86a320875f3be5c3409b9f3856e66aaa8eed803665d2c867728f0e30b426dbfd6021b9a9b9a603f1438991a2faff8ec6769619349cbd497a20f", @ANYRES16=r2, @ANYBLOB="000428bd7000fddbdf25010000000000000007410000004c0018fffffff7696200"/98], 0x68}}, 0x884) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) r5 = accept4(r4, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) perf_event_open(0x0, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000000500)={0x8, 0x80}) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r10 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r10, r8, r9) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000340)={0x9d, 0x6, {r6}, {r8}, 0x1a}) 13:56:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000050700000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012000c0001006d6163766c616e00100002000000050000000400aaaaaaaaaaaa000000000400aaaaaaaaaabb0000cb030400aaaaaaaaaabb000000000400aaaaaaaaaa35000000000400aaaaaaaaaabb0000000004000180c2000000000000000400c4360e36ba2f00000000040000000000000000000000040007e83f23bd2e00000000040000000000000000000a0005000400000000000000d0d3dd2d48212a74ba1113c87c17089fb20b04135bbb10b1d7156259b4afec3d68fe1cab4dc87438a8ba8f986386c67a0203d78f16041150876f33160b65cb90b752912982ced99dfae70a5bd52b80e6182f"], 0x4c}}, 0x0) 13:56:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x0, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) pipe(&(0x7f0000000000)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:09 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r2 = accept(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) dup(r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000140)={0x1, @tick=0x8, 0x0, {}, 0x0, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045301, &(0x7f0000000240)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x424b3c2712bcfdf1, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)=0x1) r4 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={&(0x7f0000000300)="fb440ab3a7aec325ae25d1efde556a9f4ec34586da635464e41ed9022e98da6f8bba06d89714013396d96604849fedbb2ba294f1999a93c199f2c5a797fc8fc3b50c9306e047036912b7f86c8752aa66e0a769890356bffeaa77c93323abcecb79a29b965ccebc5451a89f62384962676536a9afc11e9200c8033d7a0cd4cf812901b4aff9f87008f076c4b3e658c8c28f450cc2ad2e318bb92c96f7672e776f6c0617ee128dc7f7084122219ae46d9ec2d0095210d80729894be52fbba7e8226fef5ab7", &(0x7f0000000400)="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"}}, &(0x7f00000002c0)) fstat(r1, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x1, &(0x7f0000000140)=[r7]) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r9 = accept(r8, 0x0, 0x0) sendmmsg$inet6(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000001480)={{{@in6=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}}}, &(0x7f00000001c0)=0xe8) r11 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r14 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r14, r12, r13) getresuid(&(0x7f0000001580)=0x0, &(0x7f00000015c0), &(0x7f0000001600)) statx(0xffffffffffffff9c, &(0x7f0000001640)='./file0\x00', 0x800, 0x200, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000001780)={0x210, 0x9b6512f290bb4a60, 0x1, [{{0x2, 0x1, 0x3, 0x7, 0x7ee5, 0x2, {0x6, 0x0, 0x100000001, 0x7, 0x10001, 0x37, 0x8, 0xfffffe01, 0x1, 0x83, 0x0, r5, r7, 0x6, 0xc52}}, {0x6, 0x4, 0x7, 0x80000000, '[system'}}, {{0x3, 0x1, 0x40, 0x2, 0xffffffff, 0x1, {0x2, 0x4f, 0x6, 0x8, 0x22, 0x0, 0x0, 0x9, 0xb659bf37, 0x1ff, 0x9, r10, r13, 0x1000, 0x1}}, {0x0, 0x6, 0x11, 0x6, '/dev/dlm-control\x00'}}, {{0x4, 0x1, 0xafe, 0x59, 0x8, 0x6, {0x6, 0x8, 0x100000000, 0x0, 0x57d, 0x64, 0x1, 0x9, 0x4, 0x80000000, 0x6, r15, r16, 0xd397, 0x5}}, {0x6, 0x101, 0x11, 0x8, '/dev/dlm-control\x00'}}]}, 0x210) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r4, 0x1000000000013) [ 2479.265482][ T4454] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 2479.326634][ T4459] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2479.359279][ T4459] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 13:56:09 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x6, 0x8020) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000180)={{0x1, 0x0, @descriptor="f4a90a0f0f925e20"}, 0x5c, [], "da63973eb360b17331929c0999caa5526558cbfd25eef83690604b8101211f28ee82b57b35df25ff1d0d02145a544a9b8cd6e8277c54f7933a3e24db2759fb825249477b1e63cabd006c4a24bd4340e72cdee83e0d9a62628a1a6b65"}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) 13:56:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) pipe(&(0x7f0000000000)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r3, 0x4122, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2479.656295][ T4573] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) pause() 13:56:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) pipe(&(0x7f0000000000)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r3, 0x4122, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2479.983637][ T4685] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:10 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) pipe(&(0x7f0000000000)) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r3, 0x4122, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x0, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:10 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045301, &(0x7f0000000240)={{0x0, 0x1}, {}, 0x0, 0x3}) r1 = gettid() r2 = getgid() write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000300)={0xa0, 0x0, 0x5, {{0x0, 0x1, 0x4a7a, 0xb414, 0x1f, 0x3ff, {0x6, 0x7, 0x9, 0x10000, 0x8, 0x2, 0x4, 0x20, 0xcee, 0x64, 0x2, 0xee01, r2, 0x4, 0xffffffe0}}}}, 0xa0) timer_create(0x0, &(0x7f0000000100)={0x0, 0xe}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r5 = accept(r4, 0x0, 0x0) ptrace$setsig(0x4203, r3, 0xffffffffffffffe1, &(0x7f0000000440)={0x24, 0x7f, 0x4}) sendmmsg$inet6(r5, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) sendto$inet6(r5, &(0x7f00000003c0)="3f1cc5796998ad7e1e43f75f90a1b9468abe72b4b0c80896a60b0fae5d3d49f6c807a3b78435d8a6060884590a7c334bc38f54fc7caf1bbf9734246ca604868f9ba3ffcdbb0df293ac7395", 0x4b, 0x40082, &(0x7f00000000c0)={0xa, 0x4e24, 0x1, @local, 0x2}, 0x1c) tkill(r1, 0x1000000000013) 13:56:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) pipe(&(0x7f0000000000)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r3, 0x4122, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:10 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) pipe(&(0x7f0000000000)) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r3, 0x4122, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r7, 0x4122, 0x0) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2480.783415][ T4685] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:11 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) pipe(&(0x7f0000000000)) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r3, 0x4122, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r2 = accept(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x894) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) 13:56:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x0, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r7, 0x4122, 0x0) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x0, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) pipe(&(0x7f0000000000)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2481.247157][ T5030] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2481.399506][ T5064] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r7, 0x4122, 0x0) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:13 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/23, 0xa6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045301, &(0x7f0000000240)) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 13:56:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) pipe(&(0x7f0000000000)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:13 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) 13:56:13 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) r1 = add_key$keyring(&(0x7f0000000f80)='keyring\x00', &(0x7f0000000fc0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r1, &(0x7f0000001000)='trusted\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000300)="69daa9f48791a2d2da45e241955342770a9db859c26e0d42dd8207eb3d0adc9ebc29eeb96160327d89146c4a53c29cd4b7163b2e4b954cc29fd20fb829eaa8abf00e9d6e7abefaebba8aa485b0b99a042f7c4a45142052efdc36f1dff345c4ea107aa21a5a3e40eec2911acaaa404ac9fa635eb02c9a4bfe7c34a5ef69b0f1b18e143ce999319baa5de162695160e108ee760640c749ffa5931f259b1bf1a41bda5a7fd744f04a79348ec1147a4a4708d6e8497e5c7a23e255ed6f26c088f050b518507743b9547c03b99b89b725475128", 0xd1, r1) keyctl$setperm(0x5, r2, 0x4801000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) accept(r3, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f00000006c0)=@get={0x1, &(0x7f0000001080)=""/4096, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x1, @time}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r7 = accept(r6, 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r9 = accept(r8, 0x0, 0x0) sendmmsg$inet6(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r9, 0x0, 0x1, &(0x7f0000000740)=0x6, 0x4) sendmmsg$inet6(r7, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) getsockopt$inet_dccp_int(r7, 0x21, 0x1d, &(0x7f0000000600), &(0x7f0000000640)=0x4) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c000000ff4eef705bbfa618f3b702fce43c3d1734e682c2424d282edbc37c412bd799a989d9bba4eff99f94b3c2a90232df87fe181570f5cbe669", @ANYRES16=r5, @ANYBLOB="010000000000000000000304000058000100100001007564703a73797a310000000044000400200001000a00000000000001000000000000000000000000000100000000000000fe8000"/91], 0x6c}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9000200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="e00100002fef6c21fd909c091f3b800e70dc5a525d9da5cb906c312e5b8dc304c2d5cde8c76653815933ae70867ee21359c05ceed727fb5488c9cf6a60b5f1a0e3f6247e7c7d4f0fc545d02d9c7b3f95798977f0d1ef0af7a1fe1ccfa30ee39582721945be140c7fdd4e70b096ead417fdc78ef5b3339706cb8f8bc9f82792f2196151e8fe454dbfee05c31d4c8bbf7a7f2c98a39349e0a3c9a0001005ef2e580c73fde59f38ef58f6b3541ad680f0b651a06c26cbe97e6b7bd86b86c47b22e2c599290e0dfb", @ANYRES16=r5, @ANYBLOB="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"/474], 0x1e0}, 0x1, 0x0, 0x0, 0x8000}, 0x800) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045301, &(0x7f0000000240)) r10 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r10, 0x1000000000013) 13:56:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x0, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x0, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:13 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) r1 = add_key$keyring(&(0x7f0000000f80)='keyring\x00', &(0x7f0000000fc0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r1, &(0x7f0000001000)='trusted\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000300)="69daa9f48791a2d2da45e241955342770a9db859c26e0d42dd8207eb3d0adc9ebc29eeb96160327d89146c4a53c29cd4b7163b2e4b954cc29fd20fb829eaa8abf00e9d6e7abefaebba8aa485b0b99a042f7c4a45142052efdc36f1dff345c4ea107aa21a5a3e40eec2911acaaa404ac9fa635eb02c9a4bfe7c34a5ef69b0f1b18e143ce999319baa5de162695160e108ee760640c749ffa5931f259b1bf1a41bda5a7fd744f04a79348ec1147a4a4708d6e8497e5c7a23e255ed6f26c088f050b518507743b9547c03b99b89b725475128", 0xd1, r1) keyctl$setperm(0x5, r2, 0x4801000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) accept(r3, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f00000006c0)=@get={0x1, &(0x7f0000001080)=""/4096, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x1, @time}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r7 = accept(r6, 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r9 = accept(r8, 0x0, 0x0) sendmmsg$inet6(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r9, 0x0, 0x1, &(0x7f0000000740)=0x6, 0x4) sendmmsg$inet6(r7, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) getsockopt$inet_dccp_int(r7, 0x21, 0x1d, &(0x7f0000000600), &(0x7f0000000640)=0x4) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c000000ff4eef705bbfa618f3b702fce43c3d1734e682c2424d282edbc37c412bd799a989d9bba4eff99f94b3c2a90232df87fe181570f5cbe669", @ANYRES16=r5, @ANYBLOB="010000000000000000000304000058000100100001007564703a73797a310000000044000400200001000a00000000000001000000000000000000000000000100000000000000fe8000"/91], 0x6c}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9000200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="e00100002fef6c21fd909c091f3b800e70dc5a525d9da5cb906c312e5b8dc304c2d5cde8c76653815933ae70867ee21359c05ceed727fb5488c9cf6a60b5f1a0e3f6247e7c7d4f0fc545d02d9c7b3f95798977f0d1ef0af7a1fe1ccfa30ee39582721945be140c7fdd4e70b096ead417fdc78ef5b3339706cb8f8bc9f82792f2196151e8fe454dbfee05c31d4c8bbf7a7f2c98a39349e0a3c9a0001005ef2e580c73fde59f38ef58f6b3541ad680f0b651a06c26cbe97e6b7bd86b86c47b22e2c599290e0dfb", @ANYRES16=r5, @ANYBLOB="0f0727bd7000060000000c0000009c0001002c0004001400010002004e210000000000000000000000001400020002004e237f00000100000000000000000c00010069623a68737230000d0001007564703a73797a32000000000d00010069623a7465616d3000000000040002003c000200080003000000000008000400020000000800020093b2000008000200ff0000000800040005000000080001000600000008000200b100000030000700080002000000000008000100e60000000c000300d80b000000000000080002000900000005000200030000001c00020008000200ffffffff08000200010000000800010008000000980001002c0004001400010002004e22ac1414bb00000000000000001400020002004e230000000000000000000000000800030000040000440004002000010000000000000000aa1c000000200002000a004e2300000000fe8000000000000000000000000000aa0300000004000200150001006574683a76657468305f746f5f687372000000004c000500080001006574680008000100756470000c000200080002006b070000070001006962000014000200080003000000000008000200ff030000080001007564700007000100696200"/474], 0x1e0}, 0x1, 0x0, 0x0, 0x8000}, 0x800) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045301, &(0x7f0000000240)) r10 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r10, 0x1000000000013) 13:56:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r2 = accept(r1, 0x0, 0x0) pivot_root(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='./file0\x00') sendmmsg$inet6(r2, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) accept(r7, 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f00000004c0)={0xf8000000, 0x6, 0x4, 0x70000, 0x6, {0x0, 0x2710}, {0x0, 0x9, 0x7, 0x80, 0x0, 0x4, "6398c8ae"}, 0x3ff, 0x2, @offset=0x7, 0x0, 0x0, r7}) ioctl$USBDEVFS_CLAIM_PORT(r8, 0x80045518, &(0x7f0000000540)=0x5) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x6c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1, 0x8000}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @dev}}}}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xa030048c}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r5, 0x8, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x22}, 0x0) r9 = socket$inet6(0xa, 0x1, 0x8010800000000084) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x0, 0xac61ca5b3bb01eff, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0xffffffffffffffff}}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000000) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000000000)={r11}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={r11, 0x400, 0x30}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={r12, @in={{0x2, 0x4e23, @remote}}, 0x10000, 0xfffc, 0x80, 0x0, 0x20, 0x4, 0x91}, &(0x7f0000000240)=0x9c) 13:56:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x0, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) pipe(&(0x7f0000000000)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2483.760584][ T5383] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:14 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) r1 = add_key$keyring(&(0x7f0000000f80)='keyring\x00', &(0x7f0000000fc0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r1, &(0x7f0000001000)='trusted\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000300)="69daa9f48791a2d2da45e241955342770a9db859c26e0d42dd8207eb3d0adc9ebc29eeb96160327d89146c4a53c29cd4b7163b2e4b954cc29fd20fb829eaa8abf00e9d6e7abefaebba8aa485b0b99a042f7c4a45142052efdc36f1dff345c4ea107aa21a5a3e40eec2911acaaa404ac9fa635eb02c9a4bfe7c34a5ef69b0f1b18e143ce999319baa5de162695160e108ee760640c749ffa5931f259b1bf1a41bda5a7fd744f04a79348ec1147a4a4708d6e8497e5c7a23e255ed6f26c088f050b518507743b9547c03b99b89b725475128", 0xd1, r1) keyctl$setperm(0x5, r2, 0x4801000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) accept(r3, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f00000006c0)=@get={0x1, &(0x7f0000001080)=""/4096, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x1, @time}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r7 = accept(r6, 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r9 = accept(r8, 0x0, 0x0) sendmmsg$inet6(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r9, 0x0, 0x1, &(0x7f0000000740)=0x6, 0x4) sendmmsg$inet6(r7, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) getsockopt$inet_dccp_int(r7, 0x21, 0x1d, &(0x7f0000000600), &(0x7f0000000640)=0x4) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c000000ff4eef705bbfa618f3b702fce43c3d1734e682c2424d282edbc37c412bd799a989d9bba4eff99f94b3c2a90232df87fe181570f5cbe669", @ANYRES16=r5, @ANYBLOB="010000000000000000000304000058000100100001007564703a73797a310000000044000400200001000a00000000000001000000000000000000000000000100000000000000fe8000"/91], 0x6c}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9000200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="e00100002fef6c21fd909c091f3b800e70dc5a525d9da5cb906c312e5b8dc304c2d5cde8c76653815933ae70867ee21359c05ceed727fb5488c9cf6a60b5f1a0e3f6247e7c7d4f0fc545d02d9c7b3f95798977f0d1ef0af7a1fe1ccfa30ee39582721945be140c7fdd4e70b096ead417fdc78ef5b3339706cb8f8bc9f82792f2196151e8fe454dbfee05c31d4c8bbf7a7f2c98a39349e0a3c9a0001005ef2e580c73fde59f38ef58f6b3541ad680f0b651a06c26cbe97e6b7bd86b86c47b22e2c599290e0dfb", @ANYRES16=r5, @ANYBLOB="0f0727bd7000060000000c0000009c0001002c0004001400010002004e210000000000000000000000001400020002004e237f00000100000000000000000c00010069623a68737230000d0001007564703a73797a32000000000d00010069623a7465616d3000000000040002003c000200080003000000000008000400020000000800020093b2000008000200ff0000000800040005000000080001000600000008000200b100000030000700080002000000000008000100e60000000c000300d80b000000000000080002000900000005000200030000001c00020008000200ffffffff08000200010000000800010008000000980001002c0004001400010002004e22ac1414bb00000000000000001400020002004e230000000000000000000000000800030000040000440004002000010000000000000000aa1c000000200002000a004e2300000000fe8000000000000000000000000000aa0300000004000200150001006574683a76657468305f746f5f687372000000004c000500080001006574680008000100756470000c000200080002006b070000070001006962000014000200080003000000000008000200ff030000080001007564700007000100696200"/474], 0x1e0}, 0x1, 0x0, 0x0, 0x8000}, 0x800) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045301, &(0x7f0000000240)) r10 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r10, 0x1000000000013) [ 2483.998058][ T5388] tipc: Started in network mode [ 2484.003058][ T5388] tipc: Own node identity ff010000000000000000000000000001, cluster identity 4711 [ 2484.035029][ T5388] tipc: Enabling of bearer rejected, failed to enable media 13:56:14 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) pipe(&(0x7f0000000000)) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r3, 0x4122, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2484.145474][ T5383] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:14 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045301, &(0x7f0000000240)) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000002c0)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r3 = accept(r2, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x10000, @rand_addr="74f0658cd59a6a806d47dd14024c8d4c", 0x1000}], 0x1c) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 13:56:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x0, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x0, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x0, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r2 = accept(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r4 = accept(r3, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000d40)=0xa691f8d98f858218) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/250, 0xfa}, {&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f0000000400)=""/246, 0xf6}, {&(0x7f0000000500)=""/147, 0x93}, {&(0x7f00000005c0)=""/204, 0xcc}, {&(0x7f0000000740)=""/180, 0xb4}, {&(0x7f00000006c0)=""/46, 0x2e}], 0x7, &(0x7f0000000880)=""/152, 0x98}, 0x40002020) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="00000000ee42706d9a00000000280012000c00010076657468000200140001", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r10, @ANYBLOB="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"], 0x74}}, 0x0) setsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000980)={r10, @loopback, @multicast2}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xfff6, &(0x7f0000000000)={&(0x7f00000000c0)=@mpls_getroute={0x0, 0x1a, 0x2, 0x70bd2b, 0x25dfdbff, {0x1c, 0x80, 0x14, 0x1, 0xfd, 0x0, 0xfd, 0xd, 0x400}, [@RTA_TTL_PROPAGATE={0x0, 0x1a, 0x59}, @RTA_MULTIPATH={0x0, 0x9, {0x2, 0x7, 0x80, r5}}]}, 0x194}}, 0x0) 13:56:14 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) pipe(&(0x7f0000000000)) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r3, 0x4122, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x0, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2484.784349][ T5626] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:56:15 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) pipe(&(0x7f0000000000)) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r3, 0x4122, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2484.862776][ T5631] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:56:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000180)={0x0, 0x5787, 0xf99, &(0x7f00000000c0)=0x5}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x280, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_VF_PORTS={0x254, 0x18, [{0x3c, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "95a0988b0c442d63a14a6e6ac4b32379"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xff}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e7b1d5aadf1232aa23606306f904241f"}]}, {0x28, 0x1, [@IFLA_PORT_PROFILE={0xc, 0x2, 'macvlan\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x80}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x6000000}]}, {0xc, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x6}]}, {0x44, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e629740cd2466965c9dbf1e0e6478588"}, @IFLA_PORT_PROFILE={0x17, 0x2, '/dev/btrfs-control\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "0b3d22d04906487bfa0439bd9afe995a"}]}, {0x78, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xff}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2e}, @IFLA_PORT_PROFILE={0x17, 0x2, '/dev/btrfs-control\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3f}, @IFLA_PORT_PROFILE={0x17, 0x2, '/dev/btrfs-control\x00'}, @IFLA_PORT_PROFILE={0x17, 0x2, '/dev/btrfs-control\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "ba17e6e23c7eabb263270c3fa52f8b39"}]}, {0x84, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "48c75a1409bb46aecac8f2557b4e2d58"}, @IFLA_PORT_PROFILE={0x9, 0x2, '/,-@\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "7f1ca13ca8346cd7c71eabad6df8b4fc"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "638b09f627c80f511efead4e1d057c0b"}, @IFLA_PORT_PROFILE={0x11, 0x2, 'em0keyring]\\\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "cbcf1f9facb64ea37c4aeb8561f5b909"}, @IFLA_PORT_VF={0x8, 0x1, 0x7}]}, {0x20, 0x1, [@IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e26c18bd4d20573602a7ebae3801c17e"}]}, {0x80, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "96590e74d9800710b445bdd96e15fe77"}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "d932263a8e0870c2e2fff095b545d7b8"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "71581114f00eaa764670598b1f27b21e"}, @IFLA_PORT_VF={0x8, 0x1, 0xeeb}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c160e91523ea98bd3693de1e6adbb6f9"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "02de0200"}]}]}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x280}}, 0x8000001) 13:56:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x67}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x40}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x46, 0x18}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xbdfc}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7db}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x30002000}, 0x4000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000f90500"]) prctl$PR_GET_DUMPABLE(0x3) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x345}}, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r2 = accept(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x401, 0x82) r4 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000440), &(0x7f00000004c0)=0x60) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000500)={0x2, 'hsr0\x00', {0x8}, 0x4}) r5 = socket$inet6(0xa, 0x1, 0x8010800000000084) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000000)={r7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000200)={r7, @in6={{0xa, 0x4e23, 0x3f, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80000001}}, 0x9d1, 0x3}, &(0x7f00000002c0)=0x90) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000080)={0xda, 0x9, 0x4}) 13:56:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x0, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2485.241372][ T5754] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x0, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2485.530320][ T5755] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:15 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x1, @tick=0x7, 0x0, {0x3}}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045301, &(0x7f0000000240)) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000300)={0xd50, 0x8, 0x0, 'queue0\x00', 0x6}) 13:56:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) pipe(&(0x7f0000000000)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x0, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x0, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:15 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r4 = accept(r3, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000030000005800010010000186c6000000000000310000000044000400200001000a00000000000000ff01000000000000000000000000000100800000200002000a00000000000000fe8000"/102], 0x6c}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x140, r6, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x68b18e04}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb8c}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3534}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}]}, @TIPC_NLA_MEDIA={0x58, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x40}, 0x20040048) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0xff57, &(0x7f0000000480)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x505, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0x77, 0x1, 'macvlan\x00'}, {0xfffffe3f, 0x2, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0xffffffffffffff01}}, 0x0) 13:56:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x0, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) pipe(&(0x7f0000000000)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x0, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x0, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) pipe(&(0x7f0000000000)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x0, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:16 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r2 = accept(r1, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r4 = accept(r3, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) recvfrom(r4, &(0x7f0000000740)=""/4096, 0x1000, 0x20, &(0x7f0000000380)=@pppoe={0x18, 0x0, {0x1, @random="0899255d145f", 'netpci0\x00'}}, 0x80) sendmmsg$inet6(r2, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000300)={'filter\x00'}, &(0x7f0000000040)=0x78) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045301, &(0x7f0000000240)) r5 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r5, 0x1000000000013) 13:56:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x5, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x4000) creat(&(0x7f0000000080)='./file0\x00', 0x2) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x3, 0xfdc7c56642844277) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000180)=""/126) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r3 = accept(r2, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000200)=0x8000, &(0x7f0000000240)=0x2) 13:56:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) pipe(&(0x7f0000000000)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2487.055389][ T6036] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x0, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2487.202610][ T6036] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1008000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xf6c1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000000}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) [ 2487.535079][ T6155] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x0, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x0, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:18 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045301, &(0x7f0000000240)) gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x200, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000340)=0x1) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCRSGCAUSE(r4, 0x89e0, &(0x7f0000000140)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) splice(r3, 0x0, r6, 0x0, 0x80000001, 0x0) r7 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x1800) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0, r7) perf_event_open(0x0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) tkill(r1, 0x4100000f) 13:56:18 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000080)={0x3ff, 0x800, 0x80, {0x6, 0x7fffffff}, 0x6, 0x8789}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0xcc, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_IFALIASn={0x4}, @IFLA_VFINFO_LIST={0xa8, 0x16, [{0x38, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0xf301}}, @IFLA_VF_MAC={0x28, 0x1, {0x8001, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}}]}, {0x6c, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x76b35f37}}, @IFLA_VF_VLAN={0x10, 0x2, {0xfffffffc, 0x46f, 0xff}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1ff, 0x1}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1, 0x1}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x20, 0x6}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x1000, 0xffffffffffffffff}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7}}]}]}]}, 0xcc}}, 0x0) 13:56:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x0, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) mmap$snddsp_control(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x1, 0x10, r2, 0x83000000) r5 = accept(r1, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@dev, @remote}, &(0x7f00000000c0)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in6=@ipv4={[], [], @local}}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000500)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@can_newroute={0x0, 0x18, 0x800, 0x70bd2d, 0x25dfdbfe, {0x1d, 0x1, 0x3}}, 0x48}}, 0xb63e975dce660dd3) 13:56:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x0, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x0, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:19 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045301, &(0x7f0000000240)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000300)={0xe57e, 0x9e9724e93c67efa4, 0x4, 0xe000, 0x6, {0x0, 0x2710}, {0xe, 0xc, 0x9, 0x20, 0x1f, 0x6b, "b9b653c6"}, 0x3, 0x2, @planes=&(0x7f0000000040)={0x7, 0x3ff, @userptr=0x8, 0xff}, 0x7, 0x0, r0}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x401b22af894191cf}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x84, 0x3, 0x1, 0x20, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x7}, [@CTA_HELP={0x10, 0x5, {0x9, 0x1, 'pptp\x00'}}, @CTA_NAT_DST={0x28, 0xd, [@CTA_NAT_PROTO={0x24, 0x3, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}]}, @CTA_PROTOINFO={0x30, 0x4, @CTA_PROTOINFO_TCP={0x2c, 0x1, [@CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x7}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x5}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1f}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x24}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x3f}]}}, @CTA_MARK_MASK={0x8, 0x15, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x20042040}, 0x20000000) r3 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x1000000000013) 13:56:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x0, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0xc403000000000000) 13:56:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2489.187874][ T6416] netlink: 'syz-executor.5': attribute type 5 has an invalid length. 13:56:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00c545109e96b6fccf80a9a8289a8edc0000188d00e5001c0012000c0001006d6163766c616f000c00020006000200000001000a0005000400000000000000"], 0x48}}, 0x0) 13:56:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2489.448365][ T6433] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:56:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x0, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x10000, 0x100) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f00000000c0)) 13:56:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) pipe(0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2489.736345][ T6544] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x0, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:20 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045301, &(0x7f0000000240)) r1 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={&(0x7f0000000300)="a2df55e6fc89997575b164e04cf859c120b815029ecf19fc6ff50586e85a5c1b2521b5ea45525fb3720b235b248adc1238334437bcf7a6c128874a7e94ff1a7598f968b5952b3a266d7857dfee09ae22e355efd1ec9fbcfc6f5a83eacf4636", &(0x7f0000000400)="c2a7879db71f262860f6b0edba0a9e72680ec14badf707bb1d07b3536b576d9a67ab96d1481b544d1f173a91af369b7aa3290badf13da333564b0658bbef8004463907581cd8ffeabe7f9ee88b8494a1b7ddc6e9"}}, &(0x7f00000002c0)) r2 = socket$caif_stream(0x25, 0x1, 0x5) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 13:56:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x7, 0x0, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:20 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x800, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000140)=0x1000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000000000000000001e00005a9ae5974ca2c13a728078b9c84cf05b362900", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c0001006d6163766c616e000c00020006000200000000000a0005000400000000000000"], 0x48}}, 0x0) [ 2490.320928][ T6566] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 13:56:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) pipe(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x0, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000507000000100000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c0001006d6163766c616e000c00020006000200000000000a0005000400000000000000"], 0x48}}, 0x0) [ 2490.610212][ T6682] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) pipe(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x0, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:21 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) socket$can_j1939(0x1d, 0x2, 0x7) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0xcf44, 0x200, 0x8}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) 13:56:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) pipe(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x7, 0x0, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:21 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) perf_event_open(0x0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x80000, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) accept(r3, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)={r2, r3, 0xddb6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045301, &(0x7f0000000240)) r4 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x1c9c380}}, 0x0) tkill(r4, 0x1000000000013) [ 2491.243960][ T6799] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x0, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) pipe(0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x7, 0x0, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2491.598041][ T6817] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f00000001c0)={'gre0\x00', {0x2, 0x4e20, @local}}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) 13:56:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x0, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2491.789633][ T6928] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x0, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) pipe(0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:22 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r1 = accept(r0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, r2, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x8}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r5 = accept(r4, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@initdev, @in6=@dev}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000080)=0xe8) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r7 = accept(r6, 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) getpeername$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r11 = accept4(r10, 0x0, 0x0, 0x0) splice(r9, 0x0, r11, 0x0, 0x80000001, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r9, 0xc0585609, &(0x7f0000000380)={0x1ff, 0x5, 0x4, 0x20, 0xcc19, {r12, r13/1000+30000}, {0x1, 0x14, 0x9, 0x6, 0x6, 0x74, "b59ca65d"}, 0x100, 0xa561050f69665472, @offset=0xffff, 0x3, 0x0, 0xffffffffffffffff}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001200a367e0c9f0eaf0ecfc1de6200025bd7000fedbdf2507000000", @ANYRES32=r8, @ANYBLOB="02a1000048d200000500210002000000080025000100000008001c00", @ANYRES32=r14, @ANYBLOB], 0x5}}, 0x0) 13:56:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) pipe(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x7, 0x8, 0x0, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) pipe(0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:24 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x202000) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x1, @time={0x3, 0x7}, 0x0, {}, 0x56}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045301, &(0x7f0000000240)) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 13:56:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) pipe(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) pipe(0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x7, 0x8, 0x0, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="bc0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000900012000c0001006d6163766c616e00800002000600020000000000640005000a0004000180c200000100000a000400aaaaaaaaaa1600000a000400aaaaaaaaaa2a00000a000400aaaaaaaaaa1e00000a000400aaaaaaaaaa190000000a0004000181c20000f600000a000400ffffffffffff0000080001000500000008000300030000000a0005000400000000000000"], 0xbc}}, 0x40) [ 2494.417003][ T7170] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2494.455519][ T7170] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 13:56:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) pipe(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) execve(&(0x7f0000000240)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000280)='/dev/sequencer2\x00', &(0x7f00000002c0)='/proc/capi/capi20\x00', &(0x7f0000000300)='/dev/sequencer2\x00', &(0x7f0000000340)='/dev/sequencer2\x00'], &(0x7f00000005c0)=[&(0x7f00000003c0)='/dev/autofs\x00', &(0x7f0000000400)='trusted!\x00', &(0x7f0000000440)='/dev/autofs\x00', &(0x7f0000000480)=',%)\x00', &(0x7f00000004c0)='/dev/autofs\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='/dev/autofs\x00', &(0x7f0000000580)='ppp1wlan0\x00']) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x1100, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2040, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x19, 0x9, 0x2, 0x100, 0x110, r1, 0x2, [], 0x0, r2, 0x5, 0x1}, 0x3c) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) fcntl$dupfd(r1, 0x80c, r3) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x200, 0x0) ioctl$RTC_PLL_SET(r7, 0x40207012, &(0x7f0000000200)={0x10000, 0x0, 0x8000, 0x1, 0x6, 0x40, 0x1000}) 13:56:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x7, 0x8, 0x0, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:24 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x41, @tick=0xfff, 0x0, {0x0, 0x7}, 0x0, 0x0, 0x20}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f00000000c0)=0x7) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045301, &(0x7f0000000240)) r2 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) r3 = socket(0x3b, 0xce4867f844850757, 0x1) bind$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, {0x0, 0x8f, 0xd8, 0x1, 0x9d, 0x7}, 0x2}, 0xa) [ 2494.819469][ T7302] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) pipe(0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x0, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x7, 0x8, 0x7f, 0x0, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) pipe(0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x0, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x7, 0x8, 0x7f, 0x0, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r2 = accept(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x8, 0x1, 0x8, 0x0, 0x2, 0x0, 0x2, 0x18d, 0x38, 0x3d1, 0x3f, 0x3f, 0x20, 0x1, 0x800, 0x7, 0x2a7}, [{0x3, 0x3d6a, 0x401, 0x20fa, 0xfff, 0x3f, 0x1ff, 0xc35}, {0x6474e551, 0x0, 0x7, 0x9, 0x3, 0x4, 0x8a3c, 0x7}], "80c611a62681aba7cdf53b31349342181cb0f406b91ee3b207f18b58258da7e4202b0060841fa6b2d0c81e2faef96e1a8d790b", [[]]}, 0x1ab) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) 13:56:26 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045301, &(0x7f0000000240)) r1 = gettid() prctl$PR_SET_DUMPABLE(0x4, 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) timer_create(0x2, &(0x7f0000000100)={0x0, 0x12, 0x4, @tid=r2}, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{r3, r4+30000000}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 13:56:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) pipe(0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, 0x0}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2495.967699][ T7564] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bsg\x00', 0x400, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010800000000084) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000000)={r5}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000240)={r5, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xe}}}, 0x81, 0x80}, &(0x7f0000000300)=0x90) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r7 = accept(r1, 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) ioctl$SIOCX25GFACILITIES(r7, 0x89e2, &(0x7f0000000080)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000180)='cgroup.events\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x0) splice(r10, 0x0, r12, 0x0, 0x80000001, 0x0) r13 = openat$cgroup_ro(r10, &(0x7f00000006c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r13, 0x84, 0x66, &(0x7f0000000740)={r6, 0x4ab}, &(0x7f0000000780)=0x8) connect$pppl2tp(r9, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x3, 0x3, 0x0, {0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xc1}}}, 0x32) 13:56:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x0, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2496.344275][ T7683] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) pipe(0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, 0x0}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x7, 0x8, 0x7f, 0x0, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x0, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x0, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) pipe(0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, 0x0}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x0, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x0, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2497.131146][ T7683] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) pipe(0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x0, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r2 = accept(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) 13:56:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x7, 0x8, 0x7f, 0x40, 0x0, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x0, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x0, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) pipe(0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:29 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r2, 0xc0245720, &(0x7f0000000500)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x200, @time={0x0, 0x4}, 0x8, {}, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045301, &(0x7f0000000240)) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x82480, 0x0) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000000300)=""/79) timer_create(0x0, &(0x7f0000000140)={0x0, 0x1b}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0xff) tkill(0x0, 0x1000000000013) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r7, 0x400448c9, &(0x7f0000000040)={{0x4, 0x8f, 0x3, 0xf4, 0x4, 0x6}, 0x3ff}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r8, 0x200, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x943a8787841067ae}, 0x4000800) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xa20bab0aae235c61}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x24, r8, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x7}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40c4}, 0x1) accept(r6, 0x0, 0x0) bind$alg(r6, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0xfffffd6c) accept4(r5, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, &(0x7f0000000380)) 13:56:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x0, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2499.080406][ T8094] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) pipe(0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:29 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/40, 0xfffffffffffffe4c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045301, &(0x7f0000000240)) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) accept(r2, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) 13:56:29 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x7fffdf00f000, 0xa, 0x10, r1, 0x0) r2 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) r3 = socket(0xa, 0x4000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr=0x6, 0x0, 0x1000000, 'lblcr\x00', 0x0, 0x0, 0x44}, 0x2c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) fstat(r4, &(0x7f0000000300)) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000001600)={0x0, @remote, @empty}, &(0x7f0000000100)=0xfffffe78) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000003c0)={'veth1_to_team\x00', 0x9}) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={r5, @remote, @loopback}, 0xc) ioctl$FICLONE(r1, 0x40049409, r2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000480)={'team0\x00', r5}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) accept(r7, 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) socketpair(0xc15b6eb35e3129ad, 0x40002, 0x7, &(0x7f0000000280)) bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) accept(r8, 0x0, 0x0) r9 = fcntl$dupfd(r7, 0xc0a, r8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2, 0x6, &(0x7f0000000080)=@raw=[@jmp={0x5, 0x0, 0x2, 0x6, 0x0, 0xfffffffffffffffe, 0x1b}, @alu={0x7, 0x1, 0x3, 0xa, 0xa, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map={0x18, 0xb, 0x1, 0x0, r0}], &(0x7f00000000c0)='syzkaller\x00', 0x80000001, 0x0, 0x0, 0x41000, 0x2, [], r5, 0x9, r6, 0x8, &(0x7f0000000180)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x7, 0xffff, 0x2}, 0x10, 0x0, r9}, 0x78) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) [ 2499.665000][ T8249] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) pipe(0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:30 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045301, &(0x7f0000000240)) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r3 = accept(r2, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r5 = accept(r4, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r7 = accept(r6, 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r9 = accept(r8, 0x0, 0x0) sendmmsg$inet6(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) getsockname$ax25(r9, &(0x7f0000000380)={{0x3, @rose}, [@null, @rose, @remote, @rose, @bcast, @netrom, @netrom, @rose]}, &(0x7f0000000040)=0x10000032e) 13:56:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x7, 0x8, 0x7f, 0x40, 0x0, 0x0, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x0, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2499.954919][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2499.960822][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2500.039630][ T8249] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000080)) 13:56:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) pipe(0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2500.421315][ T8457] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:30 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f00000002c0)={0x0, &(0x7f0000000240)="7493e45c9268683093e38728e098fba3c1f569fcad2ba6874ad7641d9b2954ae9d198d272d256359a63e3ccdfa24ade0aabb6755b505f3c5bb19f5c7fe80ddaa3743", 0x42}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r2 = accept(r1, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x1f}], 0x1}}], 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x6404, 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f0000000300)="54cd438988377f0155cf5b9a3b6e758ad6596b5c331eabe38f2152eac79d79ba535150e6c03983474454d47d77f48e67122bd1d2f8412e57f1aac75e4929c66eaa8aa905ee2fd331b8b240c101d9a7a37060a257ceb9152b71c0fb87f2355e80210193049ed45e97e9c76cbb4c7902152c3ebac0dea8234ce8f0ea5e998e4dc597339fd01fe95c8b67e79bd5a21603e614603d65c0bbab292ed4e30076f3384faba968206cf32436a9be32df60a1629b4f927e2c6bfc9c31012276ef94eb997e0c5967e4c8") r4 = dup(0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x0, @empty}}) getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000400)={@remote}, &(0x7f0000000440)=0x14) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0xffffff36, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6769643d694f88614247e8431d02db1583907c996c94627810a46999ae4f34466dbb5ef804adeecb73f4808d926f37ff78ae8e03187a212318d6a9a1a8ccda24b782de8d4f6cd1071dd66e992efd9129aa10c9b57d00000000", @ANYRESHEX=0x0, @ANYBLOB="2c95cd2ac0410c3f8d0fc405bc314e0b007546f29dd68bc723f809b4d22a87c8f3af35c1330cb5ae7d3d4137d8efc6052e0000000000000008c5fe8faf5b0056eb4e5d8c6f27b9aa49bd74b6a1ea4f4a2b285665a705f57235d305175b00"/103]) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x490a00, 0x0) 13:56:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x7, 0x8, 0x7f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r2 = accept(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) 13:56:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0x0, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:31 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045301, &(0x7f0000000240)) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x0, @tid=r1}, &(0x7f00000002c0)) timer_settime(0x0, 0x3, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 2501.008706][ T8580] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) pipe(0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x0, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x7, 0x8, 0x7f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c0001006d6163766c616e000c00020006000200000000000ab4ea1ef6d882cd080000007d67245ad8f60abe265aade02cf1931a8beac0620a"], 0x48}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x20002, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 13:56:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) pipe(0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2501.487042][ T8710] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2501.554547][ T8710] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 13:56:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x0, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) accept(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000000c0)="28299d4a533bbc31aea200959df3e1b3403987929a2ebc480c484391c833adfa299a3b65032ccdc1e61e028582e3", 0x2e) bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r4 = accept4(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x4) 13:56:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) pipe(0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2501.849089][ T8828] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x7, 0x8, 0x7f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0x0, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0x0, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2502.646406][ T8828] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x7, 0x8, 0x7f, 0x40, 0x0, 0x0, 0x40}, {0x0, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:34 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0xcaf7, 0x4d, 0x4a, 0x1, 0x2}) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x10, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045301, &(0x7f0000000240)) r1 = gettid() r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x22, 0x0) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 13:56:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) pipe(0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x5846abd6d86a1b89) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) 13:56:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0x0, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0x0, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2504.230236][ T9069] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2504.455228][ T9085] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x7, 0x8, 0x7f, 0x40, 0x0, 0x0, 0x40}, {0x0, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) pipe(0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) r1 = accept(r0, &(0x7f0000000080)=@rc, &(0x7f0000000180)=0x80) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00') r3 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x3, 0xc000) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x10000, 0x0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x810400}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x4311c537d4781458}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xde5c}, @NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r3}, {0x8, 0x1, r4}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x4042}, 0x569e5ba587826260) 13:56:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x7, 0x8, 0x7f, 0x40, 0x0, 0x0, 0x40}, {0x0, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0x0, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) pipe(0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x0, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2505.170309][ T9202] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:35 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045301, &(0x7f0000000240)) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) sched_setscheduler(r1, 0x5, &(0x7f0000000040)=0x8) 13:56:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x7, 0x8, 0x7f, 0x40, 0x0, 0x0, 0x40}, {0x100000, 0x0, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2505.463942][ T9202] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x0, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="00000000000000001c0012000c0001006d6163766c616e000c00020006000200000000000a0005000400000000000000"], 0x3}, 0x1, 0x0, 0x0, 0xb0c3896548fc77df}, 0x40040094) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x100000, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r3 = accept(r1, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000100)={0x0, 0xffffffffffffff7f, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x0, 0x0, {0x2}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) r9 = getpgrp(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r6, 0xc1105518, &(0x7f0000000200)={{0x1, 0x5, 0x3, 0x6, 'syz0\x00', 0x2b}, 0x6, 0x0, 0x5, r9, 0x2, 0x8f3, 'syz0\x00', &(0x7f0000000380)=['posix_aPl_accessproc\x00', ')ppp1\x00'], 0x1b, [], [0x7f, 0x7f, 0x4, 0x3]}) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x88000}, 0x8008000) 13:56:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x0, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) pipe(0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x7, 0x8, 0x7f, 0x40, 0x0, 0x0, 0x40}, {0x100000, 0x0, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x0, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x0, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x7, 0x8, 0x7f, 0x40, 0x0, 0x0, 0x40}, {0x100000, 0x0, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) pipe(0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:36 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x1, @time}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r2 = accept(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f0000000400)={0x4, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045301, &(0x7f0000000240)) r3 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000002c0)) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x402000, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x39, &(0x7f0000000300)=@dstopts={0x0, 0x1b, [], [@enc_lim={0x4, 0x1, 0xc6}, @calipso={0x7, 0x28, {0x0, 0x8, 0x5, 0x6, [0x82, 0x2, 0xffff, 0xe000000]}}, @generic={0x0, 0xab, "ab82f9a8eb88fd43ebea27f61895fc3d68536d1f9019f93a5fad12c4f543941fe907ca7cd08f70700f086d0f0bc7c60529487f2c74a30b836e6b4902ad41305a62e733df0af4f8a8bda3d0f85fa7ad943b0818357c6b2b7bd5ef7dc86ecd3467a93fc63a2b1fee0914272fc6211bb6e95663860b107c497b5407b9ba36759f6f3b0467aaddcc4604087875c6fc8ff38004572973df5c685bdbc208a2fd3b1b5631469ea71c1626f8122f64"}]}, 0xe8) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x1000000000013) 13:56:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x0, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=@newlink={0xd8, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x48004, 0x2c50}, [@IFLA_VF_PORTS={0xac, 0x18, [{0x24, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x89d5031}, @IFLA_PORT_PROFILE={0x16, 0x2, ']ppp0lo\'trusted(]\x00'}]}, {0x4}, {0x20, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "39af92fba957a07f2bcc20708851dfd6"}]}, {0x60, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "dc6584bf094178e67422f71a799b1111"}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "11064c541b3cbdc7ebe6ac94fb6017cc"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xdd}, @IFLA_PORT_VF={0x8, 0x1, 0x7fff}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x53}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9ef42dba6554d11b60b980a71cd43504"}]}]}, @IFLA_ADDRESS={0xa, 0x5, @dev={[], 0x13}}]}, 0xd8}}, 0x0) r1 = add_key(&(0x7f0000000040)='pkcs7_test\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000180)="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", 0x1000, 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000001180)={r1, 0xf2, 0x4b}, &(0x7f00000011c0)={'enc=', 'pkcs1', ' hash=', {'blake2s-160\x00'}}, &(0x7f0000001240)="941af4c25f31c21d58c1bb07a62831c8177bf68735230421c877718f572826505448b54c71137246104c06c7210e431343a3a503cbbb1a178d7003d7968b5c26f941e93f880318dabec8f328ea9826f09b8e98cc0f5ef9283139cf816f41a7b26e778e8d28077f3cd38714eb25cd594a1e0831919613df705c8e86430de8aa9569b470ebe069e8e1e1df3c60f438881c298306c818757e24e5372c1cd1a3f1a93899251dc55e41cc13281a9755a9d0bd8ffa467aaa8b6fa32d55e52d9201c5e7cd8e25ae02035fca0d3190d3d962bd94412a5d159874dce93b9a6682d64cf3ed79e5a4c0ae650a686aaf87e7cfc68d3c7a76", &(0x7f0000001340)="06f5dd447ffb579fedf038447719a3aae34733f9174c1744169456200135bc215adaa6ea8acfe1e46e28a5f677031a69d9e19efdb197cd87986581c3c8a85156ef2ef13003a694d8f5be80") pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) 13:56:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) pipe(0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2506.897974][ T9714] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 2506.939247][ T9714] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x0, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c000100ce538dce98acd6c7b418f96d6163766c616e000c0002000000000000000000000000000000000000000000425f73961eb4eed4d2af3cf16b329c823084620187ae2871ee62391442ed5c50"], 0x48}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) accept(r1, 0x0, 0x0) 13:56:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) pipe(0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2507.303154][ T9812] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 13:56:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x0, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x7, 0x8, 0x7f, 0x40, 0x0, 0x0, 0x40}, {0x100000, 0x6000, 0x0, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2507.352512][ T9812] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2507.450234][ T9812] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 13:56:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x0, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2507.501462][ T9812] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 13:56:37 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200100, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0x648, 0x5}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r3 = accept(r2, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000540)={0x0, 0x1f, 0x0, 0x8ca1d35, 0x4, 0x2}, &(0x7f0000000580)=0x14) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000005c0)={r5, 0x8}, &(0x7f0000000600)=0x8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8180}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="14a71a2977307c5ee300"/20, @ANYRES16=r6, @ANYBLOB="00002cbd7000ffdbdf251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0xc014) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000"/17, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c0001006d6163766c616e000c00020006000200000000000a0005000400000000000000"], 0x48}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r8 = accept(r7, 0x0, 0x0) sendmmsg$inet6(r8, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r10 = accept(r9, 0x0, 0x0) sendmmsg$inet6(r10, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r10, 0x29, 0x45, &(0x7f00000003c0)={'HL\x00'}, &(0x7f0000000400)=0x1e) r11 = socket$inet6(0xa, 0x1, 0x8010800000000084) r12 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r11, 0x84, 0x18, &(0x7f0000000000)={r13}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000180)={r13, @in6={{0xa, 0x4e22, 0xa7, @mcast2, 0x80}}, 0x6, 0x6}, &(0x7f0000000240)=0x90) 13:56:37 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045301, &(0x7f0000000240)) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x2, &(0x7f0000000000)={{0x77359400}, {r2, r3+30000000}}, 0x0) tkill(r1, 0x1000000000013) 13:56:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x7, 0x8, 0x7f, 0x40, 0x0, 0x0, 0x40}, {0x100000, 0x0, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x1, 0x8493dae6860c78be) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x64, 0x20, 0x210, 0x70bd29, 0x25dfdbfd, {0x2, 0x14, 0x0, 0x80, 0x3f, 0x0, 0x0, 0x3, 0x10008}, [@FRA_SRC={0x8, 0x2, @multicast2}, @FRA_FLOW={0x8, 0xb, 0xfffffff9}, @FRA_SRC={0x8, 0x2, @loopback}, @FRA_FLOW={0x8, 0xb, 0x9}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x740e}, @FRA_DST={0x8, 0x1, @multicast2}, @FRA_FLOW={0x8, 0xb, 0xfffffff8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x22008080) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r3 = accept(r2, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) getsockname$ax25(r3, &(0x7f0000000280)={{0x3, @bcast}, [@netrom, @remote, @bcast, @netrom, @null, @rose, @null, @bcast]}, &(0x7f0000000300)=0x48) 13:56:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x7, 0x8, 0x7f, 0x40, 0x0, 0x0, 0x40}, {0x100000, 0x0, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2508.301220][T10170] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) pipe(0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x0, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x7, 0x8, 0x7f, 0x40, 0x0, 0x0, 0x40}, {0x100000, 0x6000, 0x0, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2508.538817][T10275] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x7, 0x8, 0x7f, 0x40, 0x0, 0x0, 0x40}, {0x100000, 0x0, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x0, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x7fffdf00f000, 0xa, 0x10, r1, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) r4 = socket(0xa, 0x4000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1000000, 'lblcr\x00'}, 0x2c) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001580)={0x0, @dev, @broadcast}, &(0x7f00000015c0)=0xc) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000300)={r5, @loopback, @remote}, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) fstat(r6, &(0x7f0000000300)) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000001600)={0x0, @remote, @empty}, &(0x7f0000000100)=0xfffffe78) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f00000003c0)={'veth1_to_team\x00', 0x9}) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={r7, @remote, @loopback}, 0xc) ioctl$FICLONE(r1, 0x40049409, r3) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000480)={'team0\x00', r7}) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x404001}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x124, r8, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0xbc, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0xffffffffffffff17, 0x4, 0x1}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x3}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r5}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x44, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r5}}, {0x8}}}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x2c, 0x2c, 0x302, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x7, 0x7fe3}, {0x8, 0xd}, {0x6, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x200}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040018}, 0x20000000) [ 2509.186766][T10406] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x0, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x7, 0x8, 0x7f, 0x40, 0x0, 0x0, 0x40}, {0x100000, 0x6000, 0x0, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:40 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x1, @time}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x20) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x80045301, &(0x7f0000000240)={{0x1}}) r2 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 13:56:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) pipe(0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x0, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x0, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x22800, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r3 = accept(r2, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r5 = accept(r4, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="de9d99bf4b9d81f76e90741a54639ed5bb1c3d45b40eca1c60b9fcbe4a809ce8f4f2a22e79f41ed7a4db2b935717e7ddf57d20fcf1e851a604a0a2636d08617a309d2af0716015b1c2ecb0b5744a2e508ec1418fcd6d9f2bc3410e0fb9bd2a2044508c5198c8b5fffdd4c297c9b564b663049a5bb200f11b8f9799389bc9b37d3c23f3552cfe329a41580ef5b9a125f0699092a05b3fc035bc173b1131ab29f655c3f9cc1b91c9", @ANYRES16=r5, @ANYBLOB="000000000000003cce4a56e394c5001200846c2841553d8338de4a8e5badb7adae0c0001006d6163766c616e090c00020006000200000000000a00040000"], 0x3}}, 0x800) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x1000) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x7d50c9011123813, 0x0) ioctl$DRM_IOCTL_GET_STATS(r9, 0x80f86406, &(0x7f0000000500)=""/231) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x101000, 0x0) 13:56:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x7, 0x8, 0x7f, 0x40, 0x0, 0x0, 0x40}, {0x100000, 0x6000, 0x3, 0x0, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x7, 0x8, 0x7f, 0x40, 0x0, 0x0, 0x40}, {0x100000, 0x6000, 0x3, 0x0, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x7, 0x8, 0x7f, 0x40, 0x0, 0x0, 0x40}, {0x100000, 0x6000, 0x3, 0x0, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x7, 0x8, 0x7f, 0x40, 0x0, 0x0, 0x40}, {0x100000, 0x6000, 0x0, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) pipe(0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x40}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r2 = accept(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000080)={{0x5, 0x80}, 0xa}, 0x10) 13:56:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:42 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x1, @time}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) getitimer(0x1, &(0x7f0000000040)) 13:56:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x7, 0x8, 0x7f, 0x40, 0x0, 0x0, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2512.053224][T10875] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x7, 0x8, 0x7f, 0x40, 0x0, 0x0, 0x40}, {0x100000, 0x6000, 0x0, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) pipe(0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080), 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) 13:56:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x7, 0x8, 0x7f, 0x40, 0x0, 0x0, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2512.730530][T11009] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) pipe(0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x7, 0x8, 0x7f, 0x40, 0x0, 0x0, 0x40}, {0x100000, 0x6000, 0x0, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2512.981351][T11017] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x7, 0x8, 0x7f, 0x40, 0x0, 0x0, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:43 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045301, &(0x7f0000000240)) r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x2, 0x10, r1, 0xd646a000) r2 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) r3 = socket(0xa, 0x4000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1000000, 'lblcr\x00'}, 0x2c) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f00000005c0)='trusted.overlay.nlink\x00', &(0x7f0000000600)={'L-', 0x3}, 0x16, 0x81adad073f0e366e) r4 = socket$inet_tcp(0x2, 0x1, 0x0) fstat(r4, &(0x7f0000000300)) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000001600)={0x0, @remote, @empty}, &(0x7f0000000100)=0xfffffe78) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000003c0)={'veth1_to_team\x00', 0x9}) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={r5, @remote, @loopback}, 0xc) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x84081, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r6, 0xaead) ioctl$FICLONE(r1, 0x40049409, r2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000480)={'team0\x00', r5}) sendmsg$xdp(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x2c, 0x0, r5, 0x3a}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000300)="82472c2f37109cee0b9ee0b96768deb3713967711471a6c263abba2e21443c3af29d512a0734b89ec771e4329434b4d303e35d7bc60c8c9649ec14c3d976c25e55a91723e58c1e8e5ae1b07fdda54cd4918096dc457fcbc74bed93c2202c9891faf71b021f1779681db8b0ab94e33644aa4dcd08079bb14acfabd5aa43d433734b41012f8b7c9d782c418735d751daa09552519d0ed53215e12841559918b01f3887b7ab68c8a0c0eed4c166198248789b6aa8a29937c82c6fcdb17ceb2ece462a38ca5198e13126325139a166df843f3af85871e4de8330692646bfa2d8607731a73f5e29b30c", 0xe7}, {&(0x7f0000000400)="f97837eca54e3827947e842251a093255b95622372ba9d9d041ffc58785fcbbd1b638d98768fd39b48a80315845b58dc0693d696df565125fd14a97c5b8d03f7b67af4c3dba17670d2c10bb2c751587664fb2ea0587159200c1da7b2f2bebd25e4b9f4c9107885215b0888e332ba940312ba0b384672b054c82496e2a6ab45e167cf2fb57e40143a6104d59725df974e851bf585152bc9ec", 0x98}, {&(0x7f00000004c0)="8df5529ca796ed15ec463f943d534b27c9ed7a61a585ab67f3bebfee5536c4ff979a19620e32e74f76b86eb2496fc5d113f297a5df45dec7fb2ba41133cfb7481b561eaffb43889dd898dd73baff4a349d45f24fcad97376d7f89de9535705103cd8d925cf21e3b04776e2040491cadea4a40c12c8aa605db84a0a857871b9a1225dced413d4d3c58e6c33d9bfe7111b660f5e8ddd070cf5c71e5bc3a31273c556d1b6cea19fc606ee02bcdaeab96f5f87a9e701d5d559283332b8c00f79afd58a57c3267e3d811a937ef9aa4d3066de235658bf76e7a34725b192bfb251931825d13e5974bc7923", 0xe8}], 0x3, 0x0, 0x0, 0x8}, 0x8000000) r7 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r7, 0x1000000000013) 13:56:43 executing program 4: r0 = socket(0x2, 0x800, 0x9) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x2c09, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x840, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r4 = accept(r3, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000340)={0x42a, 0xa, 0x4, 0x85c5506eebf94975, 0x1, {0x0, 0x2710}, {0xb953972d196470e1, 0x1, 0x8, 0x4, 0x8, 0x7, "9b02f7d0"}, 0xffff, 0x1, @offset=0x1000, 0x7fff, 0x0, r4}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r5 = accept(r1, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r7 = accept(r6, 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000180)={{{@in, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000300)=0x17) ioctl$SIOCAX25GETUID(r5, 0x89e0, &(0x7f0000000280)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, r8}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) [ 2513.795314][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2513.801355][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:56:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) pipe(0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x0, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2514.001232][T11143] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x7, 0x8, 0x7f, 0x40, 0x0, 0x0, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x0, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:44 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045301, &(0x7f0000000240)) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r3 = accept(r2, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000040)=""/62, &(0x7f00000000c0)=0x3e) tkill(r1, 0x1000000000013) 13:56:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x0, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) pipe(0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x0, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2514.468849][T11145] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 13:56:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x98, 0x1}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x0, 0x0, 0x6}]}}, 0x3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x70, 0x0, 0x7, [{0x0, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x70) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)={{0x0, 0x6000, 0x3, 0x20, 0x0, 0x7, 0x8, 0x7f, 0x40, 0x0, 0x0, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x0, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x80, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x4, 0x9, 0xff, 0x0, 0x4, 0x101, 0x1a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x36, 0x1}, 0x0, 0x2, 0x20, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) write$P9_RWALK(r4, &(0x7f00000000c0)={0x4a, 0x6f, 0x1, {0x5, [{0x48, 0x2, 0x3}, {0x98, 0x1, 0x3}, {0x40, 0x0, 0x5}, {0x40, 0x2, 0x8}, {0x40, 0x0, 0x6}]}}, 0x4a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="00fdeaed406ef24560147ee2fa26fc8c", 0x10}], 0x1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000400)={0x98, 0x0, 0x7, [{0x2, 0x8, 0xb, 0x0, ':system).lo'}, {0x4, 0x4, 0x16, 0x2, '\\}ppp0trustedsecurity*'}, {0x3, 0x9, 0x13, 0x4, 'cgroup.controllers\x00'}]}, 0x98) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x800) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r8, 0x4122, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r7, 0x0, r10, 0x0, 0x80000001, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x1, 0x6000, 0x3, 0x20, 0x6, 0x7, 0x8, 0x7f, 0x40, 0x1, 0x3f, 0x40}, {0x100000, 0x6000, 0x3, 0x3f, 0x8, 0x26, 0x1, 0x4, 0x1, 0x2, 0x9, 0xbc}, {0xd000, 0x4, 0x9, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x8, 0x81, 0x1, 0x7}, {0x1, 0x1, 0xe, 0x5, 0x40, 0x2, 0x81, 0x7f, 0x8, 0x2, 0x0, 0x9}, {0x2000, 0xd000, 0x4, 0x0, 0x0, 0x0, 0x3f, 0xb6, 0x5, 0x1, 0x2f, 0x1f}, {0x4000, 0x2, 0x3, 0x81, 0x1f, 0x9, 0xa6, 0x8, 0x7, 0x9, 0x6, 0xf8}, {0x0, 0x105002, 0xe, 0x3f, 0x82, 0x9, 0x4, 0x5, 0x5, 0xfe, 0x0, 0x8}, {0x6000, 0x1, 0x4, 0x80, 0x3, 0x5, 0x4, 0x1f, 0x3, 0x80, 0x9, 0x11}, {0x4000, 0x3000}, {0x1000, 0x2}, 0x40000, 0x0, 0x5, 0x210080, 0xb, 0x2000, 0x4000, [0x7, 0x82c, 0xffff, 0x8000]}) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000240)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:56:45 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r1 = accept(r0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010800000000084) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000000)={r4}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={r4, 0x2, 0xffffffff, 0x6}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000440)={r5, @in6={{0xa, 0x4e20, 0x40, @loopback, 0x10000}}, 0x400, 0x1, 0x0, 0x9, 0x14, 0xd, 0x7f}, &(0x7f0000000280)=0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) perf_event_open(0x0, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x7c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x1c, 0x2, [@IFLA_MACVLAN_FLAGS={0x6}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0xc}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xda0}, @IFLA_NET_NS_PID={0x8, 0x13, r7}, @IFLA_ADDRESS={0xa}]}, 0x7c}}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a50104ad3279f601", 0x10) r9 = accept(r8, 0x0, 0x0) sendmmsg$inet6(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="3e8281d251a80d6e3008380a661d33c0400f8dcad66f9994432631c4cafbc7", 0x17e}], 0x17e}}], 0x3204257417b757c, 0x0) r10 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x28803}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r10, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x1562bc4e6a180b69}, 0x80084) [ 2515.103743][T11260] ================================================================== [ 2515.112025][T11260] BUG: KCSAN: data-race in pipe_wait / put_pipe_info [ 2515.118679][T11260] [ 2515.121036][T11260] read to 0xffff8880846d71d0 of 4 bytes by task 11261 on cpu 0: [ 2515.129027][T11260] pipe_wait+0xd7/0x140 [ 2515.133169][T11260] splice_from_pipe_next.part.0+0x89/0x1d0 [ 2515.138958][T11260] __splice_from_pipe+0xb8/0x4a0 [ 2515.143876][T11260] splice_from_pipe+0xbb/0x100 [ 2515.148624][T11260] generic_splice_sendpage+0x45/0x60 [ 2515.153891][T11260] do_splice+0x6db/0xc40 [ 2515.158122][T11260] __x64_sys_splice+0x20a/0x220 [ 2515.162959][T11260] do_syscall_64+0xcc/0x3a0 [ 2515.167457][T11260] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2515.173328][T11260] [ 2515.175647][T11260] write to 0xffff8880846d71d0 of 4 bytes by task 11260 on cpu 1: [ 2515.183354][T11260] put_pipe_info+0x4d/0xb0 [ 2515.187772][T11260] pipe_release+0x115/0x170 [ 2515.192606][T11260] __fput+0x1e1/0x520 [ 2515.196584][T11260] ____fput+0x1f/0x30 [ 2515.200700][T11260] task_work_run+0xf6/0x130 [ 2515.205196][T11260] exit_to_usermode_loop+0x2b4/0x2c0 [ 2515.210469][T11260] do_syscall_64+0x384/0x3a0 [ 2515.215055][T11260] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2515.220931][T11260] [ 2515.223429][T11260] Reported by Kernel Concurrency Sanitizer on: [ 2515.229748][T11260] CPU: 1 PID: 11260 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0 [ 2515.238406][T11260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2515.248460][T11260] ================================================================== [ 2515.256528][T11260] Kernel panic - not syncing: panic_on_warn set ... [ 2515.263107][T11260] CPU: 1 PID: 11260 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0 [ 2515.271758][T11260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2515.281805][T11260] Call Trace: [ 2515.285084][T11260] dump_stack+0x11d/0x181 [ 2515.289416][T11260] panic+0x210/0x640 [ 2515.293305][T11260] ? vprintk_func+0x8d/0x140 [ 2515.297895][T11260] kcsan_report.cold+0xc/0xd [ 2515.302485][T11260] kcsan_setup_watchpoint+0x3fe/0x460 [ 2515.307851][T11260] __tsan_unaligned_write4+0xc7/0x110 [ 2515.313211][T11260] put_pipe_info+0x4d/0xb0 [ 2515.317620][T11260] pipe_release+0x115/0x170 [ 2515.322125][T11260] __fput+0x1e1/0x520 [ 2515.326102][T11260] ? put_pipe_info+0xb0/0xb0 [ 2515.330786][T11260] ____fput+0x1f/0x30 [ 2515.334886][T11260] task_work_run+0xf6/0x130 [ 2515.339394][T11260] exit_to_usermode_loop+0x2b4/0x2c0 [ 2515.344790][T11260] do_syscall_64+0x384/0x3a0 [ 2515.349459][T11260] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2515.355336][T11260] RIP: 0033:0x414ae1 [ 2515.359223][T11260] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2515.378819][T11260] RSP: 002b:00007ffde7aa0d90 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 2515.387227][T11260] RAX: 0000000000000000 RBX: 0000000000000010 RCX: 0000000000414ae1 [ 2515.395561][T11260] RDX: 0000000000000000 RSI: 0000000000001eff RDI: 000000000000000f [ 2515.403546][T11260] RBP: 0000000000000001 R08: 0000000010c81efe R09: 0000000010c81f02 [ 2515.411503][T11260] R10: 00007ffde7aa0e70 R11: 0000000000000293 R12: 000000000075c9a0 [ 2515.419483][T11260] R13: 000000000075c9a0 R14: 0000000000763c68 R15: 000000000075c07c [ 2515.429165][T11260] Kernel Offset: disabled [ 2515.433508][T11260] Rebooting in 86400 seconds..