x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="a090aa1c659e67d8930a73dd393529ad", 0x10)

03:10:12 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000fe00}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:10:12 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="a090aa1c659e67d8930a73dd393529ad", 0x10)

03:10:12 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r0, 0x29, 0x39, 0x0, 0x0)

03:10:13 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b68c27551d247e0f", 0x8)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="a090aa1c659e67d8930a73dd393529ad", 0x10)

03:10:13 executing program 5:
r0 = socket(0x2, 0xa, 0x0)
getsockname$tipc(r0, 0x0, &(0x7f0000000080))

03:10:13 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000240))

03:10:13 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @random="d1a4f35351a4", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "189435", 0x18, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0)

[ 2096.684946][T18070] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
03:10:13 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3a, 0x2, &(0x7f0000000100)=@raw=[@map_idx_val], 0x0}, 0x90)

[ 2096.924338][T18082] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:10:13 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b68c27551d247e0f", 0x8)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="a090aa1c659e67d8930a73dd393529ad", 0x10)

[ 2097.102067][T18105] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[ 2097.216058][T18083] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:10:14 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000200)=@raw=[@snprintf], &(0x7f00000002c0)='GPL\x00', 0x5}, 0x90)

03:10:14 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:10:14 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000ff00}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:10:14 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x24, 0x0, 0x0)

03:10:14 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b68c27551d247e0f", 0x8)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="a090aa1c659e67d8930a73dd393529ad", 0x10)

03:10:14 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @random="d1a4f35351a4", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "189435", 0x18, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0)

03:10:14 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x24, 0x0, 0x0)

[ 2098.362760][T18117] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
03:10:15 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x76, 0x0, 0x0)

03:10:15 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b68c27551d247e0fbdb4f1c9", 0xc)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="a090aa1c659e67d8930a73dd393529ad", 0x10)

03:10:15 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @random="d1a4f35351a4", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "189435", 0x18, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0)

03:10:15 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f00000034c0)=""/69, 0x45}], 0x4, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2098.729348][T18128] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
03:10:15 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b68c27551d247e0fbdb4f1c9", 0xc)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="a090aa1c659e67d8930a73dd393529ad", 0x10)

[ 2099.114619][T18129] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:10:16 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x24}}, 0x0)

[ 2099.531101][T18135] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
03:10:16 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @random="d1a4f35351a4", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "189435", 0x18, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0)

[ 2099.634743][ T1237] ieee802154 phy0 wpan0: encryption failed: -22
[ 2099.660706][ T1237] ieee802154 phy1 wpan1: encryption failed: -22
03:10:16 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x7925f8f7}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2099.854521][T18144] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
03:10:16 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0xd, &(0x7f0000000440), 0x8)

03:10:17 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b68c27551d247e0fbdb4f1c9", 0xc)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="a090aa1c659e67d8930a73dd393529ad", 0x10)

[ 2100.531865][T18128] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:10:17 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b68c27551d247e0fbdb4f1c9946a", 0xe)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="a090aa1c659e67d8930a73dd393529ad", 0x10)

03:10:17 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, &(0x7f0000000040))

03:10:17 executing program 5:
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000011000d040000000000000089efb5cb4a", @ANYRES32=r2], 0x20}}, 0x0)

[ 2101.209516][T18145] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:10:18 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x22, &(0x7f0000000000)=[@in={0x2, 0x0, @remote}], 0x10)

03:10:18 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x80000008}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:10:18 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b68c27551d247e0fbdb4f1c9946a", 0xe)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="a090aa1c659e67d8930a73dd393529ad", 0x10)

[ 2101.492857][T18144] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:10:18 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b68c27551d247e0fbdb4f1c9946a", 0xe)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="a090aa1c659e67d8930a73dd393529ad", 0x10)

03:10:18 executing program 0:
socketpair(0x23, 0x0, 0x1, &(0x7f0000000040))

03:10:18 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b68c27551d247e0fbdb4f1c9946af2", 0xf)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="a090aa1c659e67d8930a73dd393529ad", 0x10)

03:10:18 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040), 0x8)

03:10:18 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x80000021}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:10:19 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x4, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:10:19 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b68c27551d247e0fbdb4f1c9946af2", 0xf)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="a090aa1c659e67d8930a73dd393529ad", 0x10)

03:10:19 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xf7f82579}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:10:19 executing program 0:
socketpair(0x22, 0x0, 0xb6, &(0x7f0000000080))

03:10:19 executing program 5:
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff})
connect$pptp(r0, 0x0, 0x0)

03:10:19 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b68c27551d247e0fbdb4f1c9946af2", 0xf)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="a090aa1c659e67d8930a73dd393529ad", 0x10)

[ 2103.253942][T18188] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
03:10:20 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:10:20 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040), 0x4)

03:10:20 executing program 0:
r0 = socket$inet6(0xa, 0x806, 0x0)
listen(r0, 0x0)
listen(r0, 0x0)

03:10:20 executing program 5:
pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x7}, &(0x7f00000000c0), &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140), 0x8})

03:10:20 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@bloom_filter={0x1e, 0x0, 0x3f, 0x7e4}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, 0x0, &(0x7f00000001c0)='%-010d \x00'}, 0x20)

03:10:20 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b68c27551d247e0fbdb4f1c9946af26c", 0x10)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000000c0)="a090aa1c659e67d8930a73dd393529ad", 0x10)

03:10:20 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {0x0}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2104.114791][T18192] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:10:21 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:10:21 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000009700)=[{{0x0, 0x0, &(0x7f0000004cc0)=[{&(0x7f0000003b40)="286235d0887f2d8c82d6ac34f67a28d0ec75e1d2f06b8041973ada", 0x1b}, {&(0x7f0000004c00)="1507c3546e8afd", 0x7}, {&(0x7f0000004c40)="2c86bc3b30c1af941033ed57f9fb8dd953a472e7d2f8a8ec8387386a48c4", 0x1e}], 0x3, &(0x7f0000004d40)=ANY=[], 0x170}}, {{0x0, 0x0, &(0x7f0000005f80)=[{&(0x7f0000005ec0)="5c0384de920f8267f9e9d2ebf13bf5f63b7452a6d4c1963da0beb529f31b2e936e785390d0d8a99d74e211602a0110d8fbd2c0f170b796070835ca41683b247fad892af8fc7c22654895799a0e6def614e8d95030b7a9308c1f30e81efb519ac1d772fd0b361e5e904cd17c452404d79863c5dfee8e6e7fb242cb2226bfa0210c046901a500c6a632cc92ac0a6634c8f8fab29fcd1344c2971b839644632cee7b1340e8fd5e2fcb0424df0c6c5c4e5f5f519d088d9bc10eb", 0xb8}], 0x1}}], 0x2, 0x0)

03:10:21 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip_vti0\x00', 0x0})

03:10:21 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet6_mreq(r0, 0x29, 0x6, 0x0, &(0x7f0000000100))

03:10:21 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b68c27551d247e0fbdb4f1c9946af26c", 0x10)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000000c0)="a090aa1c659e67d8930a73dd393529ad", 0x10)

[ 2104.883993][T18188] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:10:22 executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg2\x00'})

03:10:22 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:10:22 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b68c27551d247e0fbdb4f1c9946af26c", 0x10)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000000c0)="a090aa1c659e67d8930a73dd393529ad", 0x10)

03:10:22 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b68c27551d247e0fbdb4f1c9946af26c", 0x10)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)

03:10:22 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b68c27551d247e0fbdb4f1c9946af26c", 0x10)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)

03:10:22 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003340)=ANY=[@ANYBLOB="2c2200002800270d0000da720000000000000000", @ANYRES32=r3], 0x222c}}, 0x0)

03:10:23 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b68c27551d247e0fbdb4f1c9946af26c", 0x10)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)

03:10:23 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:10:23 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b68c27551d247e0fbdb4f1c9946af26c", 0x10)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0), 0x0)

[ 2106.832122][T18223] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
03:10:24 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b68c27551d247e0fbdb4f1c9946af26c", 0x10)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0), 0x0)

03:10:24 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x4, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:10:24 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b68c27551d247e0fbdb4f1c9946af26c", 0x10)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0), 0x0)

03:10:24 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @ipv4}], 0x1c)

[ 2107.714676][T18226] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:10:24 executing program 5:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x10b8c2, 0x0)

03:10:24 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b68c27551d247e0fbdb4f1c9946af26c", 0x10)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="a090aa1c659e67d8", 0x8)

03:10:24 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:10:24 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e24, @dev}, @in6={0xa, 0x0, 0x0, @local}], 0x2c)

[ 2108.133593][T18230] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:10:25 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})

03:10:25 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b68c27551d247e0fbdb4f1c9946af26c", 0x10)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="a090aa1c659e67d8", 0x8)

03:10:25 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:10:25 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b68c27551d247e0fbdb4f1c9946af26c", 0x10)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="a090aa1c659e67d8", 0x8)

[ 2109.081171][T18245] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2109.243106][T18249] netlink: 8712 bytes leftover after parsing attributes in process `syz-executor.0'.
03:10:26 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x2, 0x0, 0x0)

[ 2109.342452][T18268] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
03:10:26 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b68c27551d247e0fbdb4f1c9946af26c", 0x10)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="a090aa1c659e67d8930a73dd", 0xc)

03:10:26 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:10:26 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x80000001, 0x4)

[ 2109.829995][T18277] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:10:27 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b68c27551d247e0fbdb4f1c9946af26c", 0x10)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="a090aa1c659e67d8930a73dd", 0xc)

03:10:27 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {0x0}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:10:27 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b68c27551d247e0fbdb4f1c9946af26c", 0x10)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="a090aa1c659e67d8930a73dd", 0xc)

[ 2110.534682][T18281] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:10:27 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}, @in], 0x2c)

03:10:27 executing program 5:
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140), 0x48)

03:10:27 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b68c27551d247e0fbdb4f1c9946af26c", 0x10)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="a090aa1c659e67d8930a73dd3935", 0xe)

03:10:28 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001480)={0x30, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x30}}, 0x0)

03:10:28 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x84, 0x0, 0x0)

[ 2111.434307][T18304] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
03:10:28 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={0x0}}, 0x44045815)

03:10:28 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:10:28 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x19, &(0x7f0000000440), 0x8)

03:10:28 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b68c27551d247e0fbdb4f1c9946af26c", 0x10)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="a090aa1c659e67d8930a73dd3935", 0xe)

03:10:28 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x7b, &(0x7f0000000440), 0x8)

03:10:29 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b68c27551d247e0fbdb4f1c9946af26c", 0x10)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="a090aa1c659e67d8930a73dd3935", 0xe)

03:10:29 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x4, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2112.614377][T18311] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:10:29 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:10:29 executing program 0:
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000002180))

03:10:29 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x19, 0x0, 0x0)

03:10:29 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b68c27551d247e0fbdb4f1c9946af26c", 0x10)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="a090aa1c659e67d8930a73dd393529", 0xf)

[ 2113.064267][T18321] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:10:30 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x8, &(0x7f0000000440), 0x8)

03:10:30 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b68c27551d247e0fbdb4f1c9946af26c", 0x10)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="a090aa1c659e67d8930a73dd393529", 0xf)

03:10:30 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:10:30 executing program 0:
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, 0x0)

03:10:30 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a00)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x20, 0x33, @probe_request={@with_ht={{{}, {}, @broadcast}}, @void, @void, @void, @void, @void}}]}, 0x3c}}, 0x0)

[ 2114.078984][T18347] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
03:10:31 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b68c27551d247e0fbdb4f1c9946af26c", 0x10)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="a090aa1c659e67d8930a73dd393529", 0xf)

03:10:31 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180), &(0x7f0000000080)=0x8)

03:10:31 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x9c)

03:10:31 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {0x0}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:10:31 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2114.933728][T18349] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:10:31 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in], 0x10)

03:10:31 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000), &(0x7f0000000040)=0x8)

03:10:32 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xf, &(0x7f0000000240)=@ringbuf, &(0x7f0000000340)='syzkaller\x00', 0x4, 0xe7, &(0x7f0000000380)=""/231}, 0x90)

[ 2115.443938][T18360] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:10:32 executing program 0:
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x1, @empty}}, 0x1e)

03:10:32 executing program 1:
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x2000000, 0x1000}, 0x20)

03:10:32 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x7c, &(0x7f0000000440), 0x8)

03:10:32 executing program 5:
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{}, 0x0, 0x0}, 0x20)

03:10:33 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x10)

03:10:33 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x6e, &(0x7f0000000440), 0x8)

03:10:33 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x10)

03:10:33 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2116.984142][T18380] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
03:10:33 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={0x0}}, 0x0)

[ 2117.102277][T18389] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:10:34 executing program 5:
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$ppp(r0, 0x0, 0x20)

[ 2117.264406][T18391] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:10:34 executing program 0:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0)

03:10:34 executing program 5:
socketpair(0x2, 0xa, 0x6, &(0x7f0000000000))

03:10:34 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x7b, &(0x7f0000000000)=[@in={0x2, 0x0, @remote}], 0x10)

03:10:34 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)

03:10:35 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x8, 0x0, 0x0)

03:10:35 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:10:35 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, &(0x7f00000000c0)=0x98)

03:10:35 executing program 5:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x84840, 0x0)

03:10:35 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {0x0}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:10:35 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x6}]}}}}})

03:10:35 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000), 0x8)

[ 2118.914774][T18428] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
03:10:35 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x4, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:10:35 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:10:35 executing program 5:
socketpair(0xf, 0x3, 0x0, &(0x7f0000000140))

03:10:35 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x7b, 0x0, 0x0)

[ 2119.163845][T18433] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:10:36 executing program 0:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'ip6_vti0\x00'})

[ 2119.609109][T18428] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:10:36 executing program 1:
socketpair(0x2, 0x0, 0x3ff, &(0x7f0000000100))

03:10:36 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0xb, &(0x7f0000000440), 0x8)

03:10:36 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10d}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:10:37 executing program 1:
socket$inet6_sctp(0xa, 0x0, 0x84)
socketpair(0x1d, 0x0, 0x0, &(0x7f0000000040))

03:10:37 executing program 0:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x60001, 0x0)

03:10:37 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0xa, 0x0, 0x0)

03:10:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:10:38 executing program 0:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x1d, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000180), 0x8}, 0x90)

[ 2121.418274][T18464] can: request_module (can-proto-0) failed.
[ 2121.711772][T18448] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
03:10:38 executing program 5:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000000380)="e4", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x3}, 0x8)
sendmsg$can_raw(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5a62538cea3645e9"}, 0x10}}, 0x0)

03:10:38 executing program 0:
pipe(&(0x7f0000014f80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$ppp(r0, &(0x7f0000000300)='\x00', 0x1)

03:10:38 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x7, 0x0, 0x0)

03:10:38 executing program 5:
write$ppp(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000014f80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$ppp(r0, &(0x7f0000000300)='\x00', 0x1)

03:10:39 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2122.474149][T18453] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:10:39 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00603000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)

03:10:39 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {0x0}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:10:39 executing program 1:
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000001080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)}, 0x50)

03:10:39 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, 0x0)

[ 2122.954639][T18458] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:10:39 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:10:40 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x7fff, @private0}, @in], 0x2c)

03:10:40 executing program 0:
r0 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0)

03:10:40 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00'})

[ 2123.940432][T18501] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
03:10:40 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:10:41 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = dup(r0)
setsockopt$inet_tcp_buf(r1, 0x6, 0x0, 0x0, 0x0)

03:10:41 executing program 5:
open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)

[ 2124.371775][T18504] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:10:41 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = dup(r0)
setsockopt$inet_mreq(r1, 0x0, 0xc, 0x0, 0x0)

03:10:41 executing program 1:
futimesat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0))

03:10:41 executing program 0:
setrlimit(0x4, &(0x7f0000000080)={0x0, 0x4})

[ 2125.141615][T18508] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:10:42 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x4, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:10:42 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:10:42 executing program 5:
pipe2(0x0, 0x80004)

03:10:42 executing program 1:
r0 = openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x400000, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x0)

03:10:42 executing program 0:
read(0xffffffffffffffff, 0x0, 0x0)

03:10:42 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_mreqn(r0, 0x0, 0x5, 0x0, &(0x7f0000000940))

03:10:42 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = dup(r0)
setsockopt$inet_mreqn(r1, 0x0, 0x9, &(0x7f00000000c0)={@multicast2, @remote={0xac, 0x14, 0x0}}, 0xc)

03:10:43 executing program 0:
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
pipe2(&(0x7f0000000140), 0x0)

03:10:43 executing program 5:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x21, &(0x7f0000000000)={0x0, 0x1300}, 0x10)
sendmsg$unix(r1, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="60000000ffff000003000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="10000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\f'], 0x6c}, 0x0)

03:10:43 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = dup(r0)
sendmsg$unix(r1, &(0x7f0000002f00)={&(0x7f0000000080)=@abs={0x8}, 0x8, &(0x7f00000016c0)=[{0x0}, {0x0}, {&(0x7f0000001100)="11", 0x1}], 0x3}, 0x0)

03:10:43 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x10, 0x2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20005, &(0x7f0000000300)={0x10, 0x2}, 0x10)

03:10:43 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2126.823893][T18541] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
03:10:43 executing program 5:
faccessat(0xffffffffffffffff, 0x0, 0x0)

03:10:44 executing program 0:
syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @remote, @val, {@ipv6}}, 0x0)

03:10:44 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
fcntl$setflags(r0, 0x2, 0x0)

03:10:44 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @local, @val, {@ipv6}}, 0x0)

03:10:44 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {0x0}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:10:44 executing program 1:
getsockname$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000040))

03:10:44 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd01}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:10:45 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = dup2(r0, r0)
sendmsg$inet_sctp(r1, &(0x7f00000006c0)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0x100, &(0x7f00000000c0), &(0x7f0000000180)=0xb0)

[ 2128.374777][T18558] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:10:45 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = dup2(r0, r0)
sendmsg$inet_sctp(r1, &(0x7f00000006c0)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@init={0x14, 0x84, 0x1, {0x12c2}}], 0x14}, 0x0)

03:10:45 executing program 5:
shutdown(0xffffffffffffffff, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000040)={0x0, @in, 0x0, 0x0, 0x290}, 0x98)
connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10)

03:10:45 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$inet(r1, &(0x7f0000000040)={0x10, 0x2}, 0x10)
r2 = socket(0x2, 0x1, 0x0)
r3 = dup2(r1, r2)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f0000000240)={0x1, [<r4=>0x0]}, &(0x7f0000000280)=0x8)
setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000480)={r4, 0x0, 0x0, 0xfffffffe}, 0x10)

03:10:45 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:10:45 executing program 0:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r1 = dup(r0)
sendmsg$inet_sctp(r1, &(0x7f0000000680)={&(0x7f0000000180)=@in6={0x1c, 0x1c, 0x1}, 0x1c, &(0x7f00000017c0)=[{&(0x7f0000000280)="d5", 0x1}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="100000008400003fcd0000007f00000110"], 0x20}, 0x0)

[ 2128.864786][T18559] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:10:45 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x12, &(0x7f0000000040)={0x80}, 0x1)

03:10:46 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = dup(r0)
sendmsg$unix(r1, &(0x7f0000002f00)={&(0x7f0000000080)=@abs={0x8}, 0x8, &(0x7f00000016c0)=[{&(0x7f00000000c0)="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", 0xfb4}, {0x0}, {&(0x7f0000001100)="11", 0x1}], 0x3}, 0x0)

03:10:46 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000018c0))

03:10:46 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)='`', 0x1}], 0x1}, 0x0)

[ 2130.071672][T18574] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
03:10:47 executing program 1:
syz_emit_ethernet(0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa"], 0x0)

[ 2130.393058][T18580] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:10:47 executing program 1:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
sendmsg$unix(0xffffffffffffff9c, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="a41a8c04c8c93009d6a72a3788986c0904808eb1452d5a6d39c8b61ea8a888203d207c40ef65a50c4c99900857c9be8ae8346350308b7090a892f266d536552204a33f3c23c568b043916e3a8e3222e30c22f647dd1649a363e8d6cf90f3aa6291116039dabfec54d58dbbe30efbf7ad07f2b6f921736a7bf18f90239cd1f3a0a4dcbed220", 0x85}], 0x1, 0x0, 0x10}, 0x0)
r1 = dup(r0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r4 = dup2(r2, r3)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x105, &(0x7f0000000440)={0x1, [<r5=>0x0]}, &(0x7f0000000400)=0x8)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x26, &(0x7f0000000880)={r5}, &(0x7f00000008c0)=0x8)

[ 2130.533416][T18583] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:10:47 executing program 0:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r1 = dup(r0)
sendmsg$inet_sctp(r1, &(0x7f0000000680)={&(0x7f0000000180)=@in6={0x1c, 0x1c, 0x1}, 0x1c, &(0x7f00000017c0)=[{&(0x7f0000000280)="d5", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000084000000090000007f220001100000008400000009000000ac"], 0x20}, 0x0)

03:10:48 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x4, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:10:48 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = dup2(r0, r0)
sendmsg$inet_sctp(r1, &(0x7f00000006c0)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x1a, &(0x7f0000000080), &(0x7f00000000c0)=0x8)

03:10:48 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:10:48 executing program 0:
shmget(0x1, 0x4000, 0x2dffd29e80959ec7, &(0x7f0000ffb000/0x4000)=nil)

03:10:48 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x52, 0x0, 0x0)

03:10:48 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x4, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:10:48 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = dup2(r0, r0)
sendmsg$inet_sctp(r1, &(0x7f00000006c0)={&(0x7f0000000180)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c000000840000000a000000fe800000000000000000c500000000aa1c"], 0x38}, 0x0)

03:10:48 executing program 5:
socket$inet6_sctp(0x1c, 0x1, 0x84)
socket$inet_sctp(0x2, 0x5, 0x84)

03:10:49 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x51, 0x0, 0x0)

03:10:49 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r0, &(0x7f0000000040)="796077f66cabdafb33a77f0884aa", 0xe, 0x20080, &(0x7f0000000100)={0x10, 0x2}, 0x10)

[ 2132.604040][T18637] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
03:10:49 executing program 1:
r0 = socket(0x1c, 0x10000001, 0x84)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x901, &(0x7f0000000200), 0x8)

03:10:49 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:10:49 executing program 5:
utimensat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0, 0x0)

[ 2133.144685][T18639] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2133.404266][T18640] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
03:10:50 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000180)='z', 0x1}], 0x2}, 0x0)

03:10:50 executing program 0:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$inet(r0, &(0x7f0000000140)={0x10}, 0x10)
bind$inet(r0, &(0x7f0000000200)={0x10}, 0x10)

03:10:50 executing program 5:
socketpair(0x29, 0x2, 0x1, &(0x7f0000000080))

03:10:50 executing program 0:
socketpair(0x0, 0x0, 0x0, &(0x7f00000000c0))
syz_clone(0x0, &(0x7f0000001440), 0x0, 0x0, 0x0, 0x0)

[ 2133.972583][T18644] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:10:50 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:10:51 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000a8000000a800000006000000000000000900000d0000000000000000050000000d00000002000000100000000500000004"], 0x0, 0xc6, 0x0, 0x1}, 0x20)

[ 2134.454362][T18637] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:10:51 executing program 5:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
write$cgroup_subtree(r0, 0x0, 0x0)

03:10:51 executing program 1:
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
write$cgroup_subtree(r0, 0x0, 0x5)

03:10:51 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:10:52 executing program 0:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x800}, 0x14)

03:10:52 executing program 5:
socketpair(0x2, 0x0, 0x3000000, &(0x7f00000000c0))

03:10:52 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x4, &(0x7f0000000680)=@framed={{}, [@ldst={0x0, 0x3}]}, &(0x7f0000000700)='GPL\x00'}, 0x90)

[ 2135.783341][T18640] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:10:52 executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002180)={&(0x7f0000002080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x2e}, 0x20)

03:10:52 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:10:53 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000080), 0x9)

03:10:53 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {0x0}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:10:53 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff)
write$cgroup_subtree(r0, 0x0, 0x0)

03:10:53 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000080), 0x9)

03:10:53 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x801c581f, 0x0)

03:10:53 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8993, &(0x7f0000001240))

03:10:53 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:10:54 executing program 1:
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
write$cgroup_subtree(r0, 0x0, 0x0)

[ 2137.274060][T18700] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
03:10:54 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x5421, &(0x7f0000000080)={'veth0_vlan\x00'})

[ 2137.754480][T18706] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:10:54 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002180)={&(0x7f0000002080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x2e}, 0x20)

[ 2138.014605][T18700] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:10:54 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x4, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:10:54 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6erspan0\x00', 0x2})

03:10:55 executing program 1:
socketpair(0x1d, 0x0, 0xfffffffc, &(0x7f0000000000))

03:10:55 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:10:55 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x2c, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x48)

03:10:56 executing program 5:
socketpair(0x18, 0x0, 0x0, &(0x7f0000000a40))

03:10:56 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f00000000c0)='io.latency\x00', 0x2, 0x0)

03:10:56 executing program 5:
bpf$OBJ_GET_MAP(0x7, &(0x7f0000001800)=@generic={&(0x7f0000001780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18)

03:10:56 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2139.944604][T18721] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
03:10:56 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {0x0}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:10:56 executing program 5:
mkdir(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

03:10:57 executing program 1:
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)={@map, 0xffffffffffffffff, 0x23, 0x0, 0xffffffffffffffff, @prog_id}, 0x20)

03:10:57 executing program 0:
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0))

[ 2140.643268][T18723] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:10:57 executing program 5:
bpf$OBJ_GET_MAP(0x23, &(0x7f0000001800)=@generic={0x0, 0x2}, 0x18)

03:10:57 executing program 0:
openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x14f000, 0x0)

03:10:57 executing program 1:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='\x00'}, 0x18)

03:10:57 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2140.991959][T18727] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:10:58 executing program 1:
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x0, 0x0}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socketpair(0x11, 0x2, 0x0, &(0x7f0000000000))

03:10:58 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000001a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5}}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x2}]}]}}, &(0x7f0000001a80)=""/171, 0x4a, 0xab, 0x1}, 0x20)

03:10:58 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000002000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x90)

03:10:58 executing program 5:
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@map, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

[ 2142.154772][T18752] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
03:10:59 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x63, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20)

03:10:59 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:10:59 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xaf, 0x0, 0x1, 0x0, 0x1}, 0x48)

[ 2142.753141][T18754] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:10:59 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}}, 0x0, 0x36, 0x0, 0x1}, 0x20)

03:10:59 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}]}}, 0x0, 0x3e, 0x0, 0x1}, 0x20)

03:10:59 executing program 0:
syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0x0)

03:10:59 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x4, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2143.094083][T18768] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:11:00 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)

03:11:00 executing program 0:
r0 = socket$kcm(0x29, 0x2, 0x0)
recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10002)

03:11:00 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x98}, 0x0)

03:11:00 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:11:00 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x18, 0xf, &(0x7f0000000300)=@ringbuf, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x90)

03:11:01 executing program 5:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f00000008c0)=@framed, &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000a00), 0x8}, 0x90)

03:11:01 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, 0x0, 0x2e}, 0x20)

03:11:01 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'ip_vti0\x00'})

03:11:01 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x11}]}}, 0x0, 0x26, 0x0, 0x1}, 0x20)

03:11:01 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:11:01 executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x1}]}}, 0x0, 0x26}, 0x20)

03:11:02 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x11, 0xb, &(0x7f0000000300)=@framed={{}, [@printk={@d}]}, &(0x7f00000003c0)='GPL\x00'}, 0x90)

[ 2145.241872][T18791] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
03:11:02 executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x12}]}}, 0x0, 0x26}, 0x20)

03:11:02 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {0x0}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2146.002178][T18796] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:11:02 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2146.082629][T18809] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:11:03 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000140)=@ringbuf={{}, {}, {}, [@ringbuf_query={{}, {}, {0x85, 0x0, 0x0, 0xc}}]}, &(0x7f0000000340)='GPL\x00'}, 0x90)

03:11:03 executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0xa9}]}}, 0x0, 0x26}, 0x20)

03:11:03 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x1}, 0x20)

03:11:03 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {0x0}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2146.929760][T18830] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
03:11:03 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5}}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {0x6}, {0x6, 0x4}]}]}}, 0x0, 0x56, 0x0, 0x1}, 0x20)

[ 2147.354258][T18834] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:11:04 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x2}]}}, 0x0, 0x26}, 0x20)

03:11:04 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:11:04 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000140)=@ringbuf={{0x28, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000340)='GPL\x00'}, 0x90)

03:11:04 executing program 1:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f00000008c0)=@framed, &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000a00)={0x0, 0x4}, 0x8}, 0x90)

03:11:04 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f0000000140)=@framed={{}, [@alu={0x4, 0x1, 0x0, 0x0, 0x7}]}, &(0x7f0000000340)='GPL\x00'}, 0x90)

[ 2147.910960][T18846] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
03:11:04 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0xf}]}}, 0x0, 0x26, 0x0, 0x1}, 0x20)

03:11:05 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:11:05 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20)

03:11:05 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0xe, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)

[ 2148.761543][T18850] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:11:05 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x1000000}, 0x20)

03:11:06 executing program 0:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f00000008c0)=@framed, &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40), 0x10}, 0x90)

03:11:06 executing program 5:
r0 = socket$kcm(0x29, 0x2, 0x0)
recvmsg$kcm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x41)

03:11:06 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x28}, 0x20)

[ 2149.612729][T18830] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:11:06 executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x2, 0xd00}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28}, 0x20)

03:11:06 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f0000000140)=@framed={{}, [@alu={0x4}]}, &(0x7f0000000340)='GPL\x00'}, 0x90)

03:11:07 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x110040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:11:07 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x13000000}]}}, 0x0, 0x26}, 0x20)

03:11:07 executing program 0:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002fc0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000005b80)={0x0, 0x0, &(0x7f0000005b40)=[{&(0x7f0000004a40)="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", 0x174}], 0x1}, 0x48810)

03:11:07 executing program 0:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0)

03:11:07 executing program 5:
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f00000004c0)='syzkaller\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0x23, &(0x7f0000001900)={r0, 0x0, 0x0}, 0x10)

[ 2150.952347][T18855] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:11:08 executing program 0:
socketpair(0x2, 0x0, 0x0, &(0x7f0000000440))

03:11:08 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x18, 0x9, &(0x7f0000001680)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}, @alu={0x0, 0x0, 0x4}, @tail_call, @func, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000001880)='GPL\x00', 0x7, 0xe8, &(0x7f00000018c0)=""/232}, 0x90)

03:11:08 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x8, 0x3, &(0x7f0000000480)=@framed, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff73, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x90)

03:11:08 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:11:08 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x5, 0x5, 0x7f, 0x5}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x2}, 0x38)

03:11:10 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {0x0}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:11:10 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x1c, 0x1, &(0x7f0000000700)=@raw=[@ldst], &(0x7f0000000800)='syzkaller\x00'}, 0x90)

03:11:10 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x9, &(0x7f0000000c00)=ANY=[@ANYBLOB="8510"], &(0x7f00000004c0)='GPL\x00', 0x7, 0xb8, &(0x7f0000000500)=""/184}, 0x90)

03:11:10 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20}, 0x0)

03:11:10 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x130040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:11:10 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x4, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2154.233371][T18928] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
03:11:11 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x5, 0x5, 0x7f, 0x5}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f0000000d00)}, 0x20)

03:11:11 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x18, 0x1, &(0x7f0000001680)=@raw=[@alu={0x6, 0x0, 0x8}], &(0x7f0000001880)='GPL\x00', 0x7, 0xe8, &(0x7f00000018c0)=""/232}, 0x90)

03:11:11 executing program 5:
ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000000))
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={0x0}, 0x18)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0)
syz_clone(0x100000, 0x0, 0x0, &(0x7f0000001440), &(0x7f0000001480), &(0x7f00000014c0)="2958a75bbf8969b60f856a526552e26494f84b80a37b7aa882684c6da2c1a43dcf7cbceae84607b23d61249854a5c9eaa866365dce5d2284fd9f655f95566af71a87a312ef589cde884edbca5b315b968af788b7ffd70f380fee27a9eb7f80194e209a603f5897c837aa251603f14e06dd55921b1f8998ed7b41bc6f6238815999775140f6bc6139be70af5078c73c314fb0a36c22ff455ba2df2d12df4cbabfb70c4d372ed7dfba66935fdb4ea901ef49b5b2790486f9ea67be92ba25ee742fe7df")

03:11:11 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:11:12 executing program 0:
openat$ppp(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)

03:11:12 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000180)=@framed={{}, [@map_idx_val]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90)

03:11:12 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x18, 0x5, &(0x7f0000001680)=@raw=[@tail_call={{0x18, 0x2, 0x4}}], &(0x7f0000001880)='GPL\x00', 0x7, 0xe8, &(0x7f00000018c0)=""/232}, 0x90)

03:11:12 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffeffff}, 0x90)

[ 2155.644650][T18931] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
03:11:12 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@bloom_filter={0x1e, 0x0, 0x3f, 0x7e4}, 0x48)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={0x0, r0}, 0x18)

03:11:12 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640))
sendmsg$unix(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000000100000001"], 0x98}, 0x0)

[ 2156.234304][T18930] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:11:13 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0xf, &(0x7f0000000100)=@ringbuf, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90)

[ 2156.531833][T18935] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:11:13 executing program 1:
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x14, &(0x7f00000032c0)={{}, 0x0, 0x0}, 0x20)

03:11:13 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000340))

03:11:13 executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0xa, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x36}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f00000013c0)=""/132, 0x32, 0x84, 0x1}, 0x20)

03:11:13 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x150040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2157.234002][T18933] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:11:14 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x90)

03:11:14 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x9, 0x1, &(0x7f0000000040)=@raw=[@kfunc], &(0x7f0000000080)='syzkaller\x00'}, 0x90)

[ 2157.433189][T18921] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:11:14 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x160040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:11:14 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@bloom_filter={0x1e, 0x0, 0x3f, 0x7e4}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, 0x0, &(0x7f0000000040)=""/220}, 0x20)

03:11:14 executing program 0:
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000003dc0)={0x0, 0x0, 0x0, 0x0}, 0x38)

03:11:14 executing program 5:
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48)

03:11:15 executing program 5:
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003240)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48)

03:11:15 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x4, 0x84, &(0x7f0000000080)=""/132}, 0x90)

03:11:15 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x4, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:11:15 executing program 5:
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x48)

03:11:15 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x170040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:11:15 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {0x0}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:11:15 executing program 0:
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x1e, &(0x7f00000032c0)={{}, 0x0, 0x0}, 0x20)

03:11:15 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000540)="7f", 0x1}], 0x1}, 0x0)

03:11:15 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000013c0)=""/132, 0x36, 0x84, 0x1}, 0x20)

03:11:16 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005600)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg$unix(r0, 0x0, 0x0)

03:11:16 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x1000, &(0x7f00000008c0)=""/4096}, 0x90)

[ 2159.330861][T19001] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
03:11:16 executing program 1:
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000005580), 0x48)

03:11:16 executing program 0:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000400)=0xffffffffffffffff, 0x4)

[ 2159.809512][T19005] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:11:16 executing program 1:
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map=0x1}, 0x20)

03:11:16 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000002600000024"], &(0x7f0000000980)=""/174, 0x3e, 0xae, 0x1}, 0x20)

[ 2160.192025][T19018] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:11:17 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:11:17 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0)
ioctl$TUNGETSNDBUF(r0, 0x800454d3, 0x0)

03:11:17 executing program 0:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002fc0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000005b80)={0x0, 0x0, &(0x7f0000005b40)=[{&(0x7f0000004a40)="e9c8210206be4a8a53b0246985bc9bac6f98bfd909e40cce", 0x18}], 0x1}, 0x48810)

03:11:17 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000002e00)=@bloom_filter={0x1e, 0x0, 0xe7f, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x48)

[ 2160.544650][T19012] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
03:11:17 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)

03:11:17 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x11, 0x2, &(0x7f0000000000)=@raw=[@alu={0x7, 0x0, 0x0, 0x0, 0x6}, @exit], &(0x7f0000001880)='GPL\x00', 0x7, 0xdd, &(0x7f00000018c0)=""/221}, 0x90)

[ 2161.038569][T19001] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2161.063085][ T1237] ieee802154 phy0 wpan0: encryption failed: -22
[ 2161.063152][ T1237] ieee802154 phy1 wpan1: encryption failed: -22
03:11:18 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x1, &(0x7f0000000040)=@raw=[@kfunc], &(0x7f0000000080)='syzkaller\x00', 0x0, 0xdb}, 0x90)

03:11:18 executing program 1:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x1d, &(0x7f0000000800)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0}, 0x90)

03:11:18 executing program 0:
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000005580), 0x48)

03:11:18 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x190040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:11:18 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x8}, 0x90)

03:11:19 executing program 0:
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48)

[ 2162.232935][T19018] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:11:19 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0xf, &(0x7f0000000100)=@ringbuf, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90)

03:11:19 executing program 5:
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0xc, &(0x7f00000032c0)={{}, 0x0, 0x0}, 0x20)

03:11:19 executing program 1:
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000880), 0xc)

03:11:19 executing program 0:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90)

03:11:19 executing program 5:
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$sock(0xffffffffffffffff, 0x0, 0x0)
syz_clone(0x68200000, 0x0, 0x0, 0x0, 0x0, 0x0)

03:11:20 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x4, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:11:20 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x12c, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48)

03:11:20 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0x3, &(0x7f0000000480)=@framed={{0x5}}, &(0x7f00000004c0)='syzkaller\x00'}, 0x90)

03:11:20 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:11:20 executing program 1:
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x48)

[ 2163.988209][T19070] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
03:11:21 executing program 0:
socketpair(0x10, 0x3, 0x0, &(0x7f0000000440))

03:11:21 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002"], &(0x7f0000000980)=""/174, 0x3e, 0xae, 0x1}, 0x20)

03:11:21 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x4, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:11:21 executing program 0:
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002dc0)={0x0, 0x0, 0x18}, 0xc)

[ 2164.880011][T19072] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:11:21 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x5, 0x5, 0x7f, 0x5}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-5lx  \x00'}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x4}, 0x38)

03:11:22 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x4, 0x1, &(0x7f0000000040)=@raw=[@kfunc], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x300}, 0x90)

03:11:22 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:11:22 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={0x0, &(0x7f00000004c0)=""/176, 0x0, 0xb0, 0x1}, 0x20)

[ 2165.594190][T19084] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2165.815106][T19075] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:11:22 executing program 0:
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000002f00)={0xffffffffffffffff, 0x0, 0x0}, 0x20)

[ 2166.151836][T19086] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:11:23 executing program 1:
mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000840)='syz1\x00', 0x1ff)

03:11:23 executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@volatile, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x36}]}}, &(0x7f00000013c0)=""/132, 0x36, 0x84, 0x1}, 0x20)

[ 2166.383492][T19092] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:11:23 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:11:23 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1a, 0x0, 0x0, 0x0, 0x1006, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x48)

03:11:23 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x2, 0x4, &(0x7f0000000080)=@raw=[@map_fd, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffd}], &(0x7f00000004c0)='syzkaller\x00'}, 0x90)

03:11:24 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {0x0}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:11:24 executing program 0:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0xf, &(0x7f0000000000)=@ringbuf, &(0x7f0000000100)='GPL\x00'}, 0x90)

03:11:24 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x4, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:11:24 executing program 1:
socketpair(0x5, 0x0, 0x0, &(0x7f0000000540))

03:11:24 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:11:25 executing program 0:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002140)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90)

[ 2168.314262][T19117] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2168.763790][T19130] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:11:25 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:11:25 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x404, 0x1}, 0x48)

03:11:25 executing program 1:
bpf$OBJ_GET_MAP(0x7, &(0x7f0000001a80)=@generic={0x0, 0x0, 0x38}, 0x18)

[ 2169.278690][T19121] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
03:11:26 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x5, 0x5, 0x7f, 0x5}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)='%-010d \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1, <r2=>0xffffffffffffffff}, 0x4)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r2, &(0x7f0000000040)='R', &(0x7f0000000080)=""/46}, 0x20)

03:11:26 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0)
ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0)

03:11:26 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {&(0x7f00000005c0)='!', 0x1}], 0x2}, 0x0)

[ 2170.092430][T19124] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2170.162257][T19117] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2170.773924][T19134] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:11:28 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0x3, &(0x7f0000000480)=@framed={{0x63}}, &(0x7f00000004c0)='syzkaller\x00'}, 0x90)

03:11:28 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:11:28 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {0x0}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:11:28 executing program 1:
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x22e001, 0x0)

03:11:28 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x4, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:11:29 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x11, 0x2, &(0x7f0000000000)=@raw=[@alu={0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}, @exit], &(0x7f0000001880)='GPL\x00', 0x7, 0xdd, &(0x7f00000018c0)=""/221}, 0x90)

03:11:29 executing program 1:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001c00)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg(r0, &(0x7f0000003dc0)={0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000001c40)="5a5d1ef739bf735746002c99ceda2d649aa45ce146eec88bd9ade44268ae2f859afacf388864dab3725193b9287442d73f52dc31c8925bd2654353bdeb1be5447d642ee3227fea284aebe710490fd50b79c14a131edfe5f78d167eb4f7771774bd4c82f782da2c1186e88aac8c40bd96f2f059ff930194820f6587d38841e31b1c9186545346d5d73ff7974729cf852442217a27e2e6", 0x96}, {&(0x7f0000001d00)="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", 0x1000}, {&(0x7f0000002d00)="716c36245d3d46463a96a2ccb4e8f3ac6932d8b7a4d3ad6f8b309debc822dd40b2350339a112d84d7ce249f9463ac800", 0x30}, {&(0x7f0000002d40)="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", 0xf3c}], 0x4}, 0x801)

03:11:29 executing program 0:
socketpair(0x2, 0x0, 0x3ff, &(0x7f0000000140))

03:11:29 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:11:29 executing program 5:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x2}}, &(0x7f00000004c0)='syzkaller\x00'}, 0x90)

03:11:29 executing program 0:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x6, &(0x7f0000000800)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0}, 0x90)

03:11:29 executing program 1:
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002f40)={0xffffffffffffffff}, 0xc)

03:11:29 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000880)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)

03:11:30 executing program 5:
bpf$BPF_PROG_WITH_BTFID_LOAD(0xe, &(0x7f0000000800)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0}, 0x90)

[ 2173.241298][T19158] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
03:11:30 executing program 1:
syz_clone(0x24000000, &(0x7f0000000540)="750fc39625ee6350cc982f8967bda8e519daa76980412614d924be90c1492c8418d7060ab6c410d129629e02045a1cad5f4de97e4a0511c223a838abd357df9ef9c52e4c17a34b11341f3e389f9fcad3864a7c3c1b62f6ab405a73840312f8540d807a7f929f0b450b9bdbdc614b0fafd3b515947ca4259d9e96849cbc23cae3eda6ca19a11fd339d617b33c200543569f835df1796ef9cd640badfa940f75de403a4df9b8e5a00b331bf29f3ce12ac3a43da1", 0xb3, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)="d325708dd044272c8669cc868aa6933bb11fad83f33585e8648af5d155ed4458a95703914ff76792f3c366506707f46dc9337671bb98447da638534d23507d3be9b0f99f89adf6362506a50196f5df36b3939d8c3e66ce7edc9171fef5f193a1a08e5628909f364f6a81c73fa117820f9f2aae608477975bd77b2ee1ecf2085fe79181a858008d54905291b93312dd9d6c00c876b0821d94936836ebe095ef5072bae1d3d883a12601997b")
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@generic={&(0x7f0000000800)='./file0\x00', 0x0, 0x10}, 0x18)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000880), 0x2, 0x0)
r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
bpf$ITER_CREATE(0x21, &(0x7f0000001780), 0x8)
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000002440)={0x0, 0x6, &(0x7f0000002240)=@raw=[@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @ldst={0x3, 0x3, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @alu={0x7, 0x0, 0x3, 0x4, 0x7, 0x20, 0x10}, @generic={0x3a, 0x3, 0x2}], 0x0, 0x9, 0xdd, &(0x7f00000022c0)=""/221, 0x41100, 0x8, '\x00', 0x0, 0x16, r0, 0x8, &(0x7f00000023c0)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90)

03:11:30 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000900)=@generic={&(0x7f00000008c0)='./file0\x00'}, 0x18)

03:11:30 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:11:30 executing program 0:
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000028c0), 0x4)

03:11:30 executing program 5:
symlink(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file1\x00')
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x0)
open$dir(&(0x7f0000000240)='./file1/file0\x00', 0x0, 0x0)

[ 2174.023721][T19162] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
03:11:31 executing program 0:
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @broadcast, @val, {@ipv4}}, 0x0)

03:11:31 executing program 5:
open$dir(&(0x7f0000000040)='./file0\x00', 0x8241, 0x0)
symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00')

03:11:31 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x220040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:11:31 executing program 0:
syz_emit_ethernet(0x13e, &(0x7f0000001200)={@local, @broadcast, @val, {@ipv6}}, 0x0)

03:11:31 executing program 5:
readv(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000000)=""/82}, {&(0x7f0000000080)=""/157}, {&(0x7f0000000340)=""/173}, {&(0x7f0000000200)=""/68}], 0x228)

[ 2175.064672][T19178] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2175.193186][T19184] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2175.324026][T19190] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:11:32 executing program 0:
open$dir(&(0x7f0000000000)='./file0\x00', 0x8241, 0xf19c893fafc90c42)

[ 2175.463962][T19158] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:11:32 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x230040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:11:32 executing program 5:
open$dir(&(0x7f0000000040)='./file0\x00', 0x8241, 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1)

03:11:32 executing program 0:
syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @random="19fc550d53dc", @val, {@ipv4}}, 0x0)

03:11:32 executing program 0:
getgroups(0x7, &(0x7f0000000000)=[0x0, <r0=>0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff])
setregid(r0, 0x0)

03:11:33 executing program 5:
fchmodat(0xffffffffffffffff, 0x0, 0x6a9bb0b6bc140fe)

03:11:33 executing program 5:
syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @broadcast, @val, {@ipv4}}, 0x0)

03:11:33 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0)
renameat(r0, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0)

03:11:33 executing program 1:
open$dir(&(0x7f0000000040)='./file0\x00', 0x8241, 0x0)
truncate(&(0x7f0000000080)='./file0\x00', 0xfffffffffffffffd)

03:11:33 executing program 5:
syz_emit_ethernet(0xe, &(0x7f0000000000)={@local, @random="7ed6cc6cb599", @val, {@generic={0x8848}}}, 0x0)

03:11:33 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {0x0}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:11:33 executing program 0:
syz_emit_ethernet(0xaa, &(0x7f0000000040)={@local, @random="ec8cbfa348be", @val, {@ipv4}}, 0x0)

03:11:34 executing program 1:
syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @empty, @val, {@ipv4}}, 0x0)

03:11:34 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:11:34 executing program 5:
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @random="19fc855008a5", @val, {@ipv4}}, 0x0)

03:11:34 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:11:34 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x0)
getsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000100)=""/127, &(0x7f0000000040)=0x7f)

[ 2177.863107][T19247] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
03:11:34 executing program 0:
open$dir(0x0, 0x80, 0x0)
pipe2(&(0x7f0000001240)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000017c0), 0x0, 0x0)
pipe2(&(0x7f0000001240)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000017c0), 0x0, 0x0)
fcntl$dupfd(r2, 0x0, r3)
readv(r3, &(0x7f0000000540)=[{&(0x7f0000000340)=""/213, 0xd5}, {&(0x7f0000000440)=""/196, 0xc4}], 0x2)
r4 = fcntl$dupfd(r0, 0x0, r1)
sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
getpeername$unix(r4, &(0x7f00000002c0)=@abs, &(0x7f0000000300)=0x8)
r5 = semget(0x0, 0x4, 0x4)
semctl$GETNCNT(r5, 0x4, 0x3, &(0x7f0000000580)=""/51)
getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000240), &(0x7f0000000280)=0xc)
r6 = getpgrp(0x0)
setpgid(r6, 0x0)

03:11:35 executing program 5:
open$dir(&(0x7f0000000000)='./file0\x00', 0x8241, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)

03:11:35 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
renameat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000140)='./file0\x00')

03:11:35 executing program 1:
syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="e9ffffffffffffffffffffff86dd6082393300102c00010000000000298f87b32bf410b3f943a54c224dcdd20f9d9512b2a69f13d31de3e495"], 0x0)

[ 2178.923947][T19259] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
03:11:35 executing program 5:
open$dir(&(0x7f0000000040)='./file0\x00', 0x8241, 0x0)
truncate(&(0x7f00000000c0)='./file0\x00', 0x40003)

03:11:35 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x250040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:11:36 executing program 0:
symlink(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file1\x00')
symlink(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)='./file2\x00')
chroot(&(0x7f0000000000)='./file0\x00')
chown(&(0x7f00000002c0)='./file2\x00', 0x0, 0x0)

03:11:36 executing program 1:
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @empty, @val, {@ipv4}}, 0x0)

[ 2179.458264][T19261] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:11:36 executing program 0:
symlink(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file1\x00')
symlink(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)='./file2\x00')
chroot(&(0x7f0000000000)='./file0\x00')
chown(&(0x7f00000002c0)='./file2\x00', 0x0, 0x0)

03:11:36 executing program 5:
setitimer(0x0, &(0x7f0000000080)={{0xffffffff}}, 0x0)

03:11:36 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x260040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2180.003014][T19264] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2180.041254][T19265] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:11:37 executing program 5:
syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @random="ec8cbfa348be", @val, {@ipv4}}, 0x0)

03:11:37 executing program 1:
syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @empty, @val, {@ipv4}}, 0x0)

03:11:37 executing program 0:
symlink(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file1\x00')
symlink(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)='./file2\x00')
chroot(&(0x7f0000000000)='./file0\x00')
chown(&(0x7f00000002c0)='./file2\x00', 0x0, 0x0)

[ 2180.634404][T19247] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:11:37 executing program 1:
openat$zero(0xffffffffffffff9c, &(0x7f00000017c0), 0x0, 0x0)
mlock(&(0x7f0000003000/0x4000)=nil, 0x4000)

03:11:37 executing program 0:
symlink(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file1\x00')
symlink(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)='./file2\x00')
chroot(&(0x7f0000000000)='./file0\x00')
chown(&(0x7f00000002c0)='./file2\x00', 0x0, 0x0)

03:11:38 executing program 5:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000017c0), 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0)

03:11:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x270040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:11:38 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000080)='V', 0x1})

03:11:38 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_names\x00')
read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020)

03:11:38 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x89}, 0x48)

03:11:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:11:38 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:11:38 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x4, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:11:39 executing program 5:
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0, 0x0)

[ 2182.601247][T19322] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
03:11:39 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x44, 0x9, 0x1, 0x1}, 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38)

03:11:39 executing program 1:
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200))

03:11:39 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x290040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2183.213837][T19330] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:11:40 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000002c0)={0x2a4, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x285, 0x33, @reassoc_resp={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, 0x0, @default, @void, @void, [{0xdd, 0x84, "0865d7ea51c12dd210d4cbf18701f7afb3de07bfe2e2a5d4ef490fa8f923103e6086a4974193e394a5109c51806b38744651bb073fde428aa814d339f2058ce0a2d4b0b9c85e57d59253aec56556aacff4859374909231d2204e757d67f66fdbdade102a745d26962bb95611f4b6a3c91dc7f2e18e6f12f4ec8feb4184a07bc9c89543f7"}, {0xdd, 0x75, "04d086a3e55676193804df08e00fe257aeaa34c2d45a0fad2934ec636554184c0942d47f0f5bf1004436ba1387b7c22347d8e0206703aa0f8b31f684dbedbf0513bc2d14981ab9338cfe85c000b12f33c182585b7d3f8b6dc4eb3e0ce0f72696b7bdc9aacc1feb4f2fcfa53d977ba0cabc91cb2fa1"}, {0xdd, 0x25, "9bedbf8eafd7b8e13eeb436d9678b8257cac5f05f91a2a98783ef2e99e93702b8dda809bee"}, {0xdd, 0x81, "9c9316f7cb592544646c245792b9ede05d4f4a42d7c2cc87b9e59eb0c920adb991f7d8e9bcd373dd992d24718f7b28ba639d9dba56d2dc8097b255a93cd636ba98da215ea4bb2db38792c7229bbe5df57447164e1149bc7b972e98cda1f74b8f7cf1f8c5d56be68961a2c195fc5dc77a80cb630fb2db16c0f11864f13f0f121b6c"}, {0xdd, 0x66, "74831b3a1aefa88cff42ae6fc75f28e0cafcb6a9bee3e115c79f15cff44a763fcaeabec05c6a44ebb801fa3c5630e557d5c7a4231c9545e4aa24a46d9eb657bc65b0c96f764c4a0b4c78defe21488c2e8db2c5b8c1136dd336fc57810ba9c788bd43c78b344d"}, {0xdd, 0x52, "e104194e06cd926bcca907688e8e5d23357373b4fc7bfe7060f6a44610e8a6cc7bd531a8a57acc3b3c0952035c04b2922b7d0dddd997919805c4c52f9a6bd602c96c6a5db46bfeccdceff0e6ff040ec251a8"}]}}]}, 0x2a4}}, 0x0)

03:11:40 executing program 1:
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$getregs(0xe, r0, 0x0, &(0x7f0000001400)=""/4096)

03:11:40 executing program 0:
semctl$GETVAL(0x0, 0x0, 0xc, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001700), 0x802, 0x0)
write$UHID_CREATE(r0, &(0x7f0000001840)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000001740)=""/199, 0xc7}}, 0x120)

[ 2183.730452][T19328] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2184.042415][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2184.100813][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2184.161422][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2184.173051][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2184.193820][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2184.213693][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2184.230835][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2184.271964][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2184.292269][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2184.304565][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2184.338971][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2184.352937][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2184.390915][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2184.404355][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2184.439157][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2184.452247][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2184.474226][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2184.493728][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2184.533216][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2184.554179][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2184.581414][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2184.592258][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2184.631123][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2184.663150][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2184.699546][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2184.733388][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
03:11:41 executing program 1:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
close(r0)

[ 2184.858908][T19336] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:11:41 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2184.979900][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2184.994589][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2185.179911][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2185.211027][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2185.254148][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2185.321952][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2185.360264][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2185.432232][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
03:11:42 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='vegas\x00', 0x6)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="77631e81", 0x4}, {&(0x7f0000000080)="85f6c4d556d458f48b6f277d4bd02671f17cc531ac077fb642cf91a71f855dde971ae79f068cc4949e96d35ce8367bd003a00d232879c2d997863d1eb35be0a662f4c5b6d4539d2e2d5968b05650022919bb6ee186903eb5e2440e49ea53125a07b426a9a97fb3c8d9e384dff180862c050e23b245ac3aae9a87f341ec93fe58ebfe27b44810fe5359843ea2b7a2b963ab2c1d24b523b205969e5a67a981095266a553a987b967d30ab7d7855311f508", 0xb0}, {&(0x7f0000000300)="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", 0x243}], 0x3}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000005240)="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", 0x10a}], 0x1}}, {{0x0, 0x0, &(0x7f00000049c0)=[{&(0x7f0000002540)="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", 0xfe}, {&(0x7f0000002640)="515a258455d9f74494bee12c1339a1259e3fef186bd64a13cc27092a7ae4232a36f78684cd9be7c4abdb2932cb50142f7ea33f80f1bf7f84196d4dcd8db6d381951a25f7c0a9a7728154208061a07d01acdfb214c3af890e6bbd54d8f0231f8efdca1741d1aeebbaf25beb0c5e9374c893c37a44427ea671d2a55b5e5f0cca92f62d545391daefc594e40e84ce0c41bf887fa5b83465b04d0c27866097b1cb1b472e2cbd7f33a0dd22c2ad54031be4723f0062a81e6b86a2ddfbb29c35529828840762ecb25c1eefde711fd5d3c69ce9306418f7c876f8d4", 0xd8}, {&(0x7f0000002740)="baab2e20373148c4c67112a58c34ac3df341e7dadbaab55b77a1c89e0f9acca3b81a074247c6ff22921f7daa0410629cbf859117678ec7010f7d98c69c0ca0ed35eee18f7ba8680a3db71cd5d031fe06f7f5ab0b455d9a182f3f34862336076c2d95683ec6e0fa12f4b810175a7b0c0b9ab18cd83c57b50a68c752b5236a8be6cf665fd5755067b63c4f830de02e68b0fffbb5f8165a83138b925ba37daa5f873916f68205972634c8ff62266b20dcdfeff48c80cb65cbe7dc299572d4784ada4016ea14703ae77392b4a2e55665bb6ba44a9434e6cade80038175be0160f64fae06caaa8a64994c9a2ddada631a1728150b2af2f1baca17f0a75a26e5e579346fad547a1ccf35324f57705a9949ccc2ec960eb87dcc4670f6c672b4388e7c206618891f752a4d94dd1147c23981d977cb17f679c1560f752937a831a1d3befe38a9fe26afe6ed03e37d59975cf21e0ebe29987d43850a8dadb4642f33f7d8440570e823f60d0bb1660be51f7dbb9ce7c09053f36d957f9e4d40064efcf6e1ccca45d6652a967d3a6041be9649e24bb7fa08088574b4408022139996da0738922be41ee02e0ee107e1277a204e59d49253892a2600a9d7a726887ee63fd96ea96ca5c80e16e68bc3a886d107f42998ca3ce194ebc050edfc36413db15114ba935bc7692231b0e22052b26d2fb05c4b03ae427b933e4ddfdd8f18d34cad0875758721d6bce81f0f1ea9cb9620bac9f4fe037cee14039c75ed66b407be66c1cf2c599e612a00abf903f029664fd7fb3cd12481fdfb5e768cf6b24898eaa0343376ad1eaf1efdc8b8fc288655981012f293d2fe45e75714fee5cc5a752d1608ced8baec4ad0af8b49d0ffc059f163df35cc85ec4bc4cdab6982532eaaf5b94a5f5401c8d29aba6db811bdcbeb0a5e5e93a1525c5c", 0x293}], 0x3}}], 0x3, 0xc800)

[ 2185.560064][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2185.590565][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2185.621487][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2185.654621][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2185.688435][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
03:11:42 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2185.841019][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2185.882103][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2185.920564][T19340] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:11:42 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000001480)={0x3, 0xfffffffd})
syz_usb_disconnect(0xffffffffffffffff)

03:11:42 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = dup2(r0, r0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x19, &(0x7f0000000240), &(0x7f0000000280)=0x8)

[ 2186.114071][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2186.181862][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2186.213703][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2186.244309][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2186.279066][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2186.311957][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2186.442312][T12932] usb 6-1: new high-speed USB device number 51 using dummy_hcd
03:11:43 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:11:43 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2186.632941][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
03:11:43 executing program 1:
socket(0x2, 0x20000000, 0x1)

[ 2186.721883][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2186.904542][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2186.938406][T12932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2186.969565][T12932] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2187.074618][T19369] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2187.103366][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2187.103399][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2187.103423][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2187.221432][T12932] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2187.244763][T12932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2187.272945][T12932] usb 6-1: config 0 descriptor??
[ 2187.313841][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2187.341815][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2187.353514][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2187.394201][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2187.433732][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2187.464390][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2187.500409][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2187.514579][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2187.553966][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2187.593364][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2187.752079][T19374] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2187.790682][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
03:11:44 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x901, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x16)

[ 2187.814624][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2187.853346][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2187.891827][T12932] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[ 2187.973835][T12932] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[ 2187.983558][T12932] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[ 2188.079573][T12932] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[ 2188.121522][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2188.144130][T12932] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
03:11:45 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x4, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:11:45 executing program 1:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c)

[ 2188.389231][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
03:11:45 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2188.434702][T12932] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[ 2188.472192][T12932] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[ 2188.502082][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2188.554319][T12932] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[ 2188.591783][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2188.593582][T19369] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2188.630538][T12932] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[ 2188.701071][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2188.761256][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2188.801570][T12932] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
03:11:45 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x1a, &(0x7f0000000080), 0x8)

03:11:45 executing program 1:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x1c, 0x1c, 0x2}, 0x1c)

[ 2189.122678][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2189.183649][T12932] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[ 2189.311987][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2189.342887][T12932] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[ 2189.424788][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2189.501550][T12932] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[ 2189.514770][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2189.552813][T12932] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[ 2189.593023][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
03:11:46 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000240)={0x0, 0x4220}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xe)

[ 2189.691106][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2189.729986][T12932] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[ 2189.744447][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2189.809251][T12932] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving
[ 2189.844341][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
03:11:46 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r0, 0x0, 0x0, 0x100, &(0x7f00000000c0)={0x10, 0x2}, 0x10)

03:11:47 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x1a, &(0x7f0000000000), &(0x7f0000000040)=0x8)

[ 2190.151981][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2190.312072][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2190.342926][T12932] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[ 2190.498933][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2190.530864][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
03:11:47 executing program 5:
r0 = socket(0x1c, 0x10000001, 0x84)
sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@in6={0x1c, 0x1c}, 0x1c)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x26, &(0x7f0000000380), &(0x7f00000003c0)=0x8)

03:11:47 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2190.564508][T12932] usb 6-1: USB disconnect, device number 51
[ 2190.601047][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
03:11:47 executing program 1:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = dup2(r1, r0)
sendmsg$unix(r2, &(0x7f00000015c0)={&(0x7f0000000000)=@abs={0x8}, 0x8, 0x0, 0x0, &(0x7f0000001500)=[@rights, @cred], 0x78}, 0x0)

[ 2190.674003][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2190.711677][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2190.754407][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2190.791861][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2190.822357][T19387] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2190.853212][T19384] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2191.223241][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2191.354664][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2191.420605][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
03:11:48 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$inet(r1, &(0x7f0000000040)={0x10, 0x2}, 0x10)
r2 = socket(0x2, 0x1, 0x0)
r3 = dup2(r1, r2)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f0000000240)={0x1, [<r4=>0x0]}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000040)=0x10)

[ 2191.463823][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
03:11:48 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x4, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2191.544692][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2191.643759][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
03:11:48 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, 0x0, 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2191.771542][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2191.814192][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
03:11:48 executing program 5:
r0 = open(&(0x7f0000000000)='./file0\x00', 0x241c2, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x24000, 0x0)
write(r0, &(0x7f0000000600)="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", 0x200)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffff67)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
sendfile(r1, r0, 0x0, 0xffffff04)

03:11:48 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:11:48 executing program 1:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
sendto$inet6(r0, &(0x7f0000000300)="97", 0x1, 0x0, &(0x7f0000000140)={0x1c, 0x1c, 0x3}, 0x1c)

[ 2192.213501][T19419] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2192.253824][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2192.452239][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2192.530578][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2192.619846][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
03:11:49 executing program 5:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
connect(r0, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10)

[ 2192.862283][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
03:11:49 executing program 1:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
connect$inet6(r0, &(0x7f0000000100)={0x1c, 0x1c}, 0x1c)

[ 2192.924705][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2192.960845][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2193.102512][T19420] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2193.172289][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2193.211050][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2193.234011][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2193.264344][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2193.297904][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2193.330652][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2193.361183][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
03:11:50 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2193.452673][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2193.463664][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2193.498666][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2193.529952][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2193.571391][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2193.601922][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2193.641695][T19422] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2193.823143][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2193.851686][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2193.882315][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2193.914105][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
03:11:50 executing program 5:
r0 = socket$inet(0x2, 0x10000005, 0x0)
bind(r0, &(0x7f0000000500)=@in6={0x1c, 0x1c, 0x3}, 0x1c)

[ 2193.950196][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2193.980540][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2194.011265][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2194.043531][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2194.081431][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2194.112336][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2194.143179][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2194.180834][T19426] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2194.224545][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2194.412288][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2194.494384][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2194.531495][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2194.544409][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2194.621945][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2194.652145][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2194.693264][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2194.694370][T19429] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2194.764691][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2195.071564][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2195.100425][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2195.114501][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2195.153854][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2195.183176][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2195.194718][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2195.224361][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2195.234798][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2195.452209][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2195.484264][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2195.519763][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2195.533899][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2195.572045][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2195.611676][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2195.643423][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2195.673098][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2195.684558][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2195.719190][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2195.749577][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2195.773616][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2195.809368][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2195.839242][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2195.870763][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2195.884419][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2195.904154][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2195.924172][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2195.940777][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2195.971351][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2195.983206][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2196.014134][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2196.023727][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2196.052122][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2196.064318][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2196.093358][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2196.124320][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2196.133866][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2196.162305][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2196.173594][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2196.194523][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2196.228833][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2196.242171][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2196.258026][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2196.284387][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2196.293422][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2196.324584][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2196.334153][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2196.363570][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2196.374119][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2196.403550][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2196.414699][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2196.443149][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2196.474707][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2196.484487][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2196.513922][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2196.524773][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2196.553236][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2196.564098][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2196.593754][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2196.603963][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2196.633277][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2196.644027][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2196.671792][ T4810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 2196.714312][ T4810] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
03:11:53 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000100), 0x14)

03:11:53 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000140), 0x14)

03:11:53 executing program 5:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r1 = dup(r0)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x5, &(0x7f00000027c0), &(0x7f0000002800)=0x4)

03:11:53 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x310040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:11:53 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{0x0}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:11:53 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, 0x0, 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:11:53 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7}, 0x14)

[ 2197.290053][T19466] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
03:11:54 executing program 1:
setsockopt$sock_linger(0xffffffffffffffff, 0xffff, 0x80, 0x0, 0x0)

03:11:54 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r0, &(0x7f00000006c0)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@authinfo={0x10}], 0x10}, 0x0)

03:11:54 executing program 1:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
recvfrom$inet6(r0, 0x0, 0x0, 0x2, 0x0, 0x0)

[ 2197.714046][T19467] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
03:11:54 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002c00)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)=[{0x0}, {0x0}], 0x2}, 0x0)

03:11:54 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x320040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2198.024595][T19471] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:11:55 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003040)={<r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000004380)={&(0x7f0000003080)=@abs, 0x6e, 0x0}, 0x0)

[ 2198.629592][T19473] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:11:55 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb4}, 0x20)

03:11:55 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000500)="1a", 0x1}], 0x3}, 0x0)

03:11:55 executing program 5:
socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000780))

[ 2199.254649][T19466] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:11:56 executing program 1:
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b80)={@ifindex, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)}, 0x40)

03:11:56 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x330040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:11:56 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000840)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000003e80)={&(0x7f0000003700)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0)

03:11:56 executing program 5:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x4, &(0x7f0000000980)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0xa}]}, &(0x7f0000000a40)='GPL\x00', 0x8, 0x7a, &(0x7f0000000a80)=""/122}, 0x90)

03:11:56 executing program 1:
ptrace(0xffffffffffffffff, 0x0)

03:11:56 executing program 0:
semget(0x2, 0x0, 0x2c2)

03:11:57 executing program 1:
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000003c0))

03:11:57 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x340040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:11:57 executing program 1:
mknod(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)

03:11:57 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0f85403, 0x0)

[ 2200.751881][T19467] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:11:57 executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x5420, 0x0)

03:11:58 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x4b32, 0x0)

03:11:58 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0145401, 0x0)

03:11:58 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00')
read$FUSE(r0, &(0x7f0000003e80)={0x2020}, 0x2020)

03:11:58 executing program 5:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000480), 0x2)
ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000500)={0x0, 0x1, [{}]})

03:11:58 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{0x0}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:11:58 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x4b4b, 0x0)

03:11:59 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x350040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:11:59 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00')
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
r2 = dup3(r0, r1, 0x0)
write$cgroup_pid(r2, &(0x7f0000000040)=0xffffffffffffffff, 0xfffffe4a)

03:11:59 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x0, 0x9, 0x0, 0x0, 0x1a, 0x8000})

03:11:59 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, 0x0, 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:11:59 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0xc06})

[ 2202.864630][T19549] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
03:11:59 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x3ff, 0x0, 0x5, 0xf7})

03:11:59 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x560d, 0x0)

03:11:59 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x4b44, 0x0)

03:11:59 executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040))

03:12:00 executing program 1:
syz_open_procfs(0xffffffffffffffff, &(0x7f00000020c0)='net/rt_cache\x00')

03:12:00 executing program 5:
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
getdents64(r3, 0x0, 0x0)
mount(&(0x7f0000000200)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='esdfs\x00', 0x80000, &(0x7f0000000400)='task\x00')
fanotify_mark(r2, 0x2, 0x1001, r3, &(0x7f00000000c0)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = getpid()
sched_setscheduler(r6, 0x1, &(0x7f0000000300)=0x3)
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
sync()

03:12:00 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x360040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2203.851176][T19555] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:12:00 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x5608, 0x4000000000000001)

03:12:00 executing program 1:
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000001300)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000390400"/20, @ANYRES32=r7, @ANYBLOB="0b00000000000000280012800b000100627269646765"], 0x48}}, 0x0)
r8 = socket(0x0, 0x803, 0x0)
getsockname$packet(r8, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

[ 2204.164733][T19557] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
03:12:01 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x560a, 0x0)

03:12:01 executing program 5:
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
getdents64(r3, 0x0, 0x0)
mount(&(0x7f0000000200)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='esdfs\x00', 0x80000, &(0x7f0000000400)='task\x00')
fanotify_mark(r2, 0x2, 0x1001, r3, &(0x7f00000000c0)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = getpid()
sched_setscheduler(r6, 0x1, &(0x7f0000000300)=0x3)
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
sync()

03:12:01 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x370040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2204.872447][T19582] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2205.302502][T19561] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2205.403345][T19571] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:12:02 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x5606, 0x1)

[ 2206.080904][T19549] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:12:03 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x380040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:12:03 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x4b2f, 0x1)

03:12:03 executing program 5:
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
getdents64(r3, 0x0, 0x0)
mount(&(0x7f0000000200)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='esdfs\x00', 0x80000, &(0x7f0000000400)='task\x00')
fanotify_mark(r2, 0x2, 0x1001, r3, &(0x7f00000000c0)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = getpid()
sched_setscheduler(r6, 0x1, &(0x7f0000000300)=0x3)
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
sync()

03:12:03 executing program 0:
select(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000001c0))

03:12:04 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x390040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:12:04 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:12:04 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{0x0}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:12:04 executing program 0:
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000001300)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000390400"/20, @ANYRES32=r7, @ANYBLOB="0b00000000000000280012800b000100627269646765"], 0x48}}, 0x0)
r8 = socket(0x10, 0x803, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}]}, 0x2c}}, 0x0)

03:12:04 executing program 5:
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
getdents64(r3, 0x0, 0x0)
mount(&(0x7f0000000200)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='esdfs\x00', 0x80000, &(0x7f0000000400)='task\x00')
fanotify_mark(r2, 0x2, 0x1001, r3, &(0x7f00000000c0)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = getpid()
sched_setscheduler(r6, 0x1, &(0x7f0000000300)=0x3)
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
sync()

03:12:05 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2208.254555][T19616] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
03:12:05 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x5602, 0x0)

03:12:05 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:12:06 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000100)={0x2})

[ 2209.500040][T19619] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
03:12:06 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00')
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
r2 = dup3(r0, r1, 0x0)
preadv(r2, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/112, 0x70}], 0x1, 0x100, 0x0)

03:12:06 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x4b49, 0x0)

03:12:06 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x4b45, 0x0)

[ 2210.101937][T19632] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2210.444135][T19629] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:12:07 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000200)={0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3}})

[ 2210.800290][T19633] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:12:07 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x5415, 0x0)

03:12:07 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:12:08 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000))

03:12:08 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$VT_DISALLOCATE(r1, 0x5608)

03:12:08 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000000))

03:12:08 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x400454a4, 0x0)

03:12:09 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x560e, 0x0)

[ 2212.651907][T19617] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:12:09 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x4b65, 0x0)

03:12:09 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:12:09 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x80e85411, 0x0)

03:12:10 executing program 5:
syz_open_dev$usbmon(&(0x7f0000004600), 0x5, 0x0)

03:12:10 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000000)=""/177)

[ 2213.360136][T19616] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:12:10 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x5, 0x0, 0x1a, 0x8000})

03:12:10 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000b80)={0x0})

03:12:10 executing program 5:
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sync()

03:12:11 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:12:11 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x4b4e, 0x0)

03:12:11 executing program 0:
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
fanotify_mark(r0, 0x2, 0x1001, 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getpid()
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
sync()

03:12:11 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x540e, 0x0)

03:12:11 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x4b66, 0x0)

03:12:12 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2215.592347][T19712] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
03:12:12 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x5603, 0x0)

03:12:12 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x4b45, 0x1)

03:12:12 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:12:12 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:12:12 executing program 5:
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace(0x10, r0)
ptrace(0xffffffffffffffff, 0x0)

03:12:12 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:12:12 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000950000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

03:12:13 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x42)

[ 2216.442275][T19715] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:12:13 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x3b, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

03:12:13 executing program 5:
quotactl$Q_GETQUOTA(0x0, &(0x7f00000005c0)=@nullb, 0x0, 0x0)

03:12:13 executing program 1:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r1, r0, 0x12, 0x0, 0x0, @prog_id}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r1, 0xffffffffffffffff, 0x12, 0x0, 0x0, @prog_id}, 0x20)

03:12:13 executing program 0:
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket(0x2, 0x3, 0x0)
connect$unix(r0, &(0x7f0000000a00)=@file={0x0, './file0\x00'}, 0xa)

[ 2217.004547][T19720] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:12:13 executing program 5:
openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x20100, 0x0)

03:12:14 executing program 1:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r1, r0, 0x12, 0x0, 0x0, @prog_id}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r1, 0xffffffffffffffff, 0x12, 0x0, 0x0, @prog_id}, 0x20)

03:12:14 executing program 5:
connect$inet6(0xffffffffffffff9c, 0x0, 0x0)

03:12:14 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x410040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:12:14 executing program 5:
sendmsg$unix(0xffffffffffffffff, &(0x7f0000003f80)={0x0, 0x0, &(0x7f0000003d80)=[{0x0}], 0x1}, 0x0)

03:12:15 executing program 1:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r1, r0, 0x12, 0x0, 0x0, @prog_id}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r1, 0xffffffffffffffff, 0x12, 0x0, 0x0, @prog_id}, 0x20)

[ 2218.544528][T19729] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
03:12:15 executing program 1:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r1, r0, 0x12, 0x0, 0x0, @prog_id}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r1, 0xffffffffffffffff, 0x12, 0x0, 0x0, @prog_id}, 0x20)

03:12:15 executing program 0:
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x3ff)

03:12:15 executing program 5:
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x1, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$FIONREAD(r1, 0xc028698d, &(0x7f0000000040))

[ 2218.930456][T19740] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:12:15 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x420040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2219.033042][T19748] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:12:16 executing program 1:
sendmmsg(0xffffffffffffffff, &(0x7f0000003a80), 0x10, 0x0)

03:12:16 executing program 1:
unlinkat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x0)

03:12:16 executing program 5:
openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0)

03:12:16 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:12:16 executing program 0:
recvfrom$inet6(0xffffffffffffff9c, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18, 0x2}, 0xc)

03:12:16 executing program 1:
getpeername(0xffffffffffffff9c, 0x0, 0x0)

03:12:16 executing program 5:
chown(&(0x7f0000003600)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff)

03:12:16 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x24, r3, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="c1"}]}, 0x24}}, 0x0)

03:12:17 executing program 1:
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0xb5491def831b895f)

03:12:17 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:12:17 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
getsockopt$sock_timeval(r0, 0xffff, 0x0, 0x0, 0x0)

03:12:17 executing program 5:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x0, 0xfff0000000000000})

[ 2220.793603][T19794] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
03:12:17 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:12:18 executing program 1:
r0 = socket$inet6(0x18, 0x1, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0)

03:12:18 executing program 5:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff})
ioctl$TIOCSCTTY(r0, 0x20007461, 0x0)

03:12:18 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x440040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:12:18 executing program 1:
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040))

03:12:18 executing program 1:
syz_clone(0x200c0200, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair(0x11, 0xa, 0x10000, &(0x7f0000000000))
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)

03:12:18 executing program 5:
getpid()
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x0)
r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
pwritev(r1, &(0x7f0000000600)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0)

[ 2222.152570][T19825] loop7: detected capacity change from 0 to 16384
03:12:19 executing program 1:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
connect$vsock_stream(r0, &(0x7f0000000000), 0x10)
connect$vsock_stream(r0, 0x0, 0x0)

03:12:19 executing program 5:
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840), 0x48)

[ 2222.524156][ T1237] ieee802154 phy0 wpan0: encryption failed: -22
[ 2222.534708][ T1237] ieee802154 phy1 wpan1: encryption failed: -22
03:12:19 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x80000011})

[ 2222.630321][T19808] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2223.139437][T19809] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
03:12:20 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x3e, 0x0)
ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/117)

03:12:20 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x450040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:12:20 executing program 0:
creat(&(0x7f0000001f00)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
mount$fuse(0x0, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB])
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001d80), 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0xff, 0x0, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000235000/0x4000)=nil, 0x4000)

03:12:20 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, 0x0)

[ 2223.532579][T19814] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2223.659548][T19820] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:12:20 executing program 1:
semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f00000001c0)=""/4096)

[ 2224.003523][T19811] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:12:20 executing program 1:
semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000001f40)=""/89)

03:12:21 executing program 1:
r0 = socket(0x2, 0x1, 0x84)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000500), 0x98)

03:12:21 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:12:21 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x8, 0x3, &(0x7f0000000480)=@framed, &(0x7f00000004c0)='syzkaller\x00'}, 0x90)

03:12:21 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x460040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:12:21 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000a00)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x41}}, @in={0x2, 0x0, @multicast1}], 0x20)

03:12:21 executing program 0:
select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfffffffffffffffc})

03:12:22 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:12:22 executing program 1:
mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0)

03:12:22 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x470040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:12:22 executing program 5:
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TIOCMGET(r0, 0x4004746a, 0x0)

[ 2225.884769][T19873] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
03:12:22 executing program 0:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:12:23 executing program 1:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{0x0}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2226.302367][T19885] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:12:23 executing program 5:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, 0x0, 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:12:23 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2226.941479][T19886] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2228.073853][T19891] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:12:25 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x490040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2228.544645][T19907] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2228.631219][T19894] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2229.533479][T19885] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:12:26 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2230.120273][T19895] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2230.291537][T19896] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
03:12:27 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x60}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:12:27 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2230.580039][T19893] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2230.740176][T19898] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2230.782200][T19906] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
03:12:27 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2231.060204][T19904] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2231.094336][T19909] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2231.530363][T19924] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
03:12:28 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:12:29 executing program 0:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:12:29 executing program 5:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, 0x0, 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2232.583469][T19933] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:12:29 executing program 1:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{0x0}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:12:29 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:12:31 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2234.774591][T19925] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2235.273515][T19932] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
03:12:32 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2236.090620][T19937] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:12:33 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x60}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2236.992097][T19941] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:12:34 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2237.612453][T19942] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
03:12:34 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2237.914463][T19948] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2238.013212][T19946] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2238.362902][T19947] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
03:12:35 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x520040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2238.491850][T19950] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2238.620035][T19951] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
03:12:35 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:12:35 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x530040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2240.010764][T19990] __nla_validate_parse: 6 callbacks suppressed
[ 2240.010783][T19990] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
03:12:37 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x540040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:12:37 executing program 5:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:12:37 executing program 1:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{0x0}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2240.974153][T19991] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:12:38 executing program 0:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2241.663409][T19995] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:12:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x550040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2241.984161][T20007] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2242.324188][T20006] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
03:12:39 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x60}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:12:39 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x560040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:12:39 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:12:40 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x570040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2243.654626][T20028] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2244.050756][T20009] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2244.273020][T20028] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2244.551572][T20014] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
03:12:41 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x580040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2245.864589][T20019] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2245.934671][T20007] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
03:12:42 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x590040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2246.050328][T20008] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2246.304817][T20024] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2246.454819][T20018] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2246.653738][T20027] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
03:12:43 executing program 1:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:12:44 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:12:44 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x60}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2247.418776][T20033] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2247.731627][T20034] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:12:44 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2248.093444][T20039] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:12:45 executing program 0:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x60}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:12:45 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2249.340964][T20052] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
03:12:46 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:12:47 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:12:47 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2251.294005][T20074] __nla_validate_parse: 6 callbacks suppressed
[ 2251.294018][T20074] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
03:12:48 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2251.542833][T20075] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
03:12:48 executing program 1:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2252.283941][T20087] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
03:12:49 executing program 0:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:12:49 executing program 5:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, 0x0, 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:12:49 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x60}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:12:49 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2253.913919][T20114] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2254.041712][T20112] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2254.123992][T20088] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2254.508759][T20098] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
03:12:51 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:12:51 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x610040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2255.159247][T20102] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2255.764532][T20105] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2256.270280][T20106] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
03:12:53 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x620040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2257.074408][T20103] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2257.222771][T20107] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2257.343790][T20109] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2257.452775][T20116] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
03:12:54 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x630040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2257.964484][T20118] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
03:12:54 executing program 1:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:12:55 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x60}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:12:55 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x640040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2259.039485][T20115] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
03:12:56 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x650040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2259.512153][T20124] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
03:12:56 executing program 0:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2260.472489][T20130] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:12:57 executing program 5:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x60}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2261.059079][T20131] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:12:58 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x660040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:12:59 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x670040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2262.573814][T20145] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2263.262247][T20146] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
03:13:01 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:13:01 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x680040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2264.412415][T20150] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2264.560786][T20151] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2264.953407][T20153] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2265.204096][T20189] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2265.289590][T20156] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2265.434047][T20161] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
03:13:02 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x690040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2265.546752][T20164] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2265.934681][T20167] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
03:13:03 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:13:04 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:13:04 executing program 1:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, 0x0, 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2267.613296][T20186] __nla_validate_parse: 4 callbacks suppressed
[ 2267.613318][T20186] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:13:04 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2268.110839][T20200] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
03:13:05 executing program 0:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:13:05 executing program 5:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, 0x0, 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2269.211628][T20205] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
03:13:06 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x60}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:13:06 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2270.274456][T20206] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2270.484130][T20219] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2271.373984][T20211] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2271.523637][T20213] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:13:08 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2271.854294][T20218] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
03:13:09 executing program 1:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, 0x0, 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2272.662978][T20220] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:13:09 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2273.242019][T20227] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2273.502717][T20221] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2273.804616][T20229] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
03:13:10 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:13:11 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:13:12 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2276.449865][T20231] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
03:13:13 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x710040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:13:13 executing program 0:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x60}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2278.852404][T20225] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2279.162925][T20233] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:13:16 executing program 5:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, 0x0, 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:13:16 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x720040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2280.463862][T20242] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2280.632004][T20244] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2280.901401][T20253] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
03:13:18 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x730040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2281.283453][T20249] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2282.262290][T20258] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:13:19 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x740040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2282.463586][T20260] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:13:20 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x750040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2283.321223][T20269] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2283.409016][T20270] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2283.929301][T20284] __nla_validate_parse: 1 callbacks suppressed
[ 2283.929315][T20284] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2284.011387][ T1237] ieee802154 phy0 wpan0: encryption failed: -22
[ 2284.041268][ T1237] ieee802154 phy1 wpan1: encryption failed: -22
[ 2284.112186][T20289] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
03:13:21 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x760040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:13:21 executing program 0:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x4, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:13:22 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x60}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:13:22 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:13:22 executing program 5:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x60}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2286.063864][T20312] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
03:13:23 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x770040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2286.506301][T20313] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
03:13:23 executing program 1:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, 0x0, 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2287.182970][T20315] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2288.068899][T20317] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:13:25 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x780040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2288.604227][T20330] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
03:13:25 executing program 0:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x4, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2289.312922][T20331] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2289.499787][T20317] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:13:29 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x790040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2292.861723][T20332] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2293.151869][T20333] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
03:13:30 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2293.674572][T20334] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2293.833105][T20336] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:13:30 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:13:30 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2294.264229][T20335] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2294.493581][T20346] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
03:13:31 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:13:32 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x60}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2295.795494][T20349] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2295.903106][T20352] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2295.973827][T20331] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
03:13:33 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2297.004643][T20353] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2297.224743][T20369] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2297.709955][T20370] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:13:34 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:13:34 executing program 0:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x4, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2298.374345][T20371] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:13:35 executing program 1:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:13:35 executing program 5:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x60}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2299.494754][T20382] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2299.692442][T20383] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2299.854040][T20388] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:13:36 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:13:37 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2301.383397][T20411] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2301.641771][T20394] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
03:13:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2302.474782][T20401] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2302.972768][T20423] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2303.172032][T20402] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
03:13:40 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:13:41 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x810040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2304.633784][T20404] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2305.144325][T20405] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2305.289269][T20408] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2305.340637][T20412] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
03:13:42 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x820040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:13:42 executing program 5:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x60}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2305.891886][T20423] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:13:43 executing program 1:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2306.808895][T20441] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
03:13:43 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x60}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:13:44 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x830040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:13:44 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2307.694150][T20444] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2308.153777][T20451] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
03:13:46 executing program 0:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x4, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:13:46 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2309.963163][T20465] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2310.204891][T20455] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2310.382542][T20457] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2310.954103][T20458] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
03:13:48 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x850040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2311.764217][T20460] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:13:48 executing program 5:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {0x0}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2312.838714][T20454] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2313.012099][T20462] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2313.345933][T20463] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:13:50 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x860040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:13:50 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:13:50 executing program 1:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2314.064640][T20472] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2315.210908][T20474] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
03:13:52 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x60}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2316.653743][T20475] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2317.273960][T20504] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
03:13:54 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x870040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2317.834557][T20483] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
03:13:55 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x880040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2319.503489][T20484] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2319.564010][T20486] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
03:13:56 executing program 0:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x4, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2319.764570][T20493] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
03:13:56 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x890040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2320.062958][T20501] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2320.292995][T20492] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2320.572954][T20502] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:13:58 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:13:58 executing program 5:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {0x0}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2321.994088][T20503] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2322.395915][T20506] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:13:59 executing program 1:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x4, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:14:00 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:14:00 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2324.844816][T20519] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2325.612326][T20520] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
03:14:03 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x60}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2326.430087][T20521] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
03:14:04 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2328.303298][T20529] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
03:14:05 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2329.173461][T20532] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2329.422889][T20542] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2329.474041][T20545] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2329.652175][T20540] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2330.232422][T20549] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2330.904361][T20551] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
03:14:08 executing program 1:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x4, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:14:08 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2331.654823][T20552] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2332.113039][T20559] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:14:09 executing program 5:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {0x0}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:14:09 executing program 0:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x4, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:14:10 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:14:10 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2333.753614][T20573] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2334.224074][T20575] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2334.903025][T20577] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
03:14:14 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x60}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2337.513225][T20589] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
03:14:14 executing program 1:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x4, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:14:15 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2340.124497][T20587] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2340.863922][T20584] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2342.083937][T20590] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2342.371981][T20588] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
03:14:19 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x910040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2343.494618][T20595] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2343.666327][T20593] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
03:14:20 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:14:21 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x920040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2345.303284][T20598] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2345.384219][ T1237] ieee802154 phy0 wpan0: encryption failed: -22
[ 2345.455431][ T1237] ieee802154 phy1 wpan1: encryption failed: -22
[ 2345.764024][T20625] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
03:14:22 executing program 0:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x4, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})

03:14:23 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x930040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2347.280277][T20604] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2347.628880][T20599] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2347.708603][T20601] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2348.072627][T20606] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
03:14:25 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x940040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:14:25 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x950040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2349.433006][T20608] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:14:26 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x960040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:14:27 executing program 1:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x60}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2351.312545][T20626] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2351.573721][T20625] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:14:28 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x970040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:14:30 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x60}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2353.613566][T20630] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
03:14:30 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x980040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2353.924600][T20635] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2354.061067][T20636] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2354.323956][T20652] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
03:14:31 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:14:32 executing program 5:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x4, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:14:32 executing program 0:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x4, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})

[ 2356.881544][T20653] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
03:14:34 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x990040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2358.303788][T20679] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2358.649396][T20670] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2359.224785][T20674] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2359.713154][T20675] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:14:38 executing program 1:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x60}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:14:38 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1800000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2362.109621][T20677] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:14:39 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2363.094121][T20684] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2363.371629][T20676] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2364.723557][T20679] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
03:14:44 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2367.844489][T20670] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2368.064226][T20690] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2369.239116][T20696] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2370.370675][T20699] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
03:14:47 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x60}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:14:47 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:14:48 executing program 5:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x4, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2371.844706][T20697] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2374.456927][T20718] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
03:14:52 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2377.692332][T20701] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
03:14:55 executing program 1:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x60}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2378.595577][T20705] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2385.663594][T20719] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:15:02 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:15:03 executing program 0:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x4, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})

[ 2387.952985][T20722] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2389.101873][T20723] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2391.184280][T20724] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:15:10 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:15:10 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1800000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:15:16 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:15:17 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x3, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2402.284815][T20730] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
03:15:19 executing program 5:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x4, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:15:19 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa10040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2406.964796][ T1237] ieee802154 phy0 wpan0: encryption failed: -22
[ 2407.002639][ T1237] ieee802154 phy1 wpan1: encryption failed: -22
03:15:26 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2414.584794][T20735] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2414.983831][T20736] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
03:15:32 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa20040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2416.286143][T20737] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
03:15:36 executing program 0:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x4, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})

03:15:41 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1800000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:15:41 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa30040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:15:41 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x3, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:15:41 executing program 5:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x4, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:15:44 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa40040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:15:53 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa50040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2439.313932][T31281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2439.352466][T31281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2439.393734][T31281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2439.643574][T31281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2439.682617][T31281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 2439.723800][T31281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
03:15:59 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2442.455754][T31281] Bluetooth: hci2: command 0x0409 tx timeout
[ 2444.571694][   T50] Bluetooth: hci2: command 0x041b tx timeout
[ 2444.585355][T20792] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2444.727260][T20798] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2444.734716][T20798] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2445.072840][   T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2445.113869][   T50] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2445.303222][   T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 2445.342544][   T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2445.383267][   T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 2445.422672][   T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 2445.463064][   T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 2445.503937][   T50] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 2445.542975][   T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 2446.854784][T31281] Bluetooth: hci2: command 0x040f tx timeout
[ 2447.353135][T20792] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 2447.393406][T20792] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 2447.432819][T20792] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 2447.473240][T20792] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 2447.514459][T20792] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 2447.552635][T20792] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 2447.713648][T20792] Bluetooth: hci5: command 0x0409 tx timeout
[ 2448.043950][T20792] Bluetooth: hci4: command 0x0409 tx timeout
[ 2448.943645][T20792] Bluetooth: hci2: command 0x0419 tx timeout
[ 2449.704062][T20792] Bluetooth: hci6: command 0x0409 tx timeout
[ 2449.794802][T20792] Bluetooth: hci5: command 0x041b tx timeout
03:16:07 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa60040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2450.274621][T20792] Bluetooth: hci4: command 0x041b tx timeout
[ 2451.783560][T20792] Bluetooth: hci6: command 0x041b tx timeout
[ 2451.885079][T20792] Bluetooth: hci5: command 0x040f tx timeout
[ 2452.384526][T20792] Bluetooth: hci4: command 0x040f tx timeout
[ 2453.874140][T20792] Bluetooth: hci6: command 0x040f tx timeout
[ 2453.944031][T20792] Bluetooth: hci5: command 0x0419 tx timeout
[ 2454.524698][T20792] Bluetooth: hci4: command 0x0419 tx timeout
[ 2455.964559][T20792] Bluetooth: hci6: command 0x0419 tx timeout
[ 2456.347666][T31281] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2456.484778][T31281] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2456.523368][T31281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2456.624247][T31281] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2456.705532][T31281] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2456.713112][T31281] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2458.914547][T31281] Bluetooth: hci0: command 0x0409 tx timeout
03:16:17 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa70040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2461.174060][T31281] Bluetooth: hci0: command 0x041b tx timeout
[ 2463.223859][T31281] Bluetooth: hci0: command 0x040f tx timeout
[ 2465.317806][T31281] Bluetooth: hci0: command 0x0419 tx timeout
[ 2468.384714][ T1237] ieee802154 phy0 wpan0: encryption failed: -22
[ 2468.423563][ T1237] ieee802154 phy1 wpan1: encryption failed: -22
03:16:25 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa80040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:16:43 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa90040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2491.155645][T29687] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
03:16:51 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:16:52 executing program 0:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x4, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})

03:16:57 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

03:17:02 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x3, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:17:02 executing program 5:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x4, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:17:02 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1800000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2505.852645][T20792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2506.004709][T20792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2506.043596][T20792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2506.083473][T20792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2506.122936][T20792] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 2506.163319][T20792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2508.902367][T20792] Bluetooth: hci1: command 0x0409 tx timeout
[ 2510.983923][T20792] Bluetooth: hci1: command 0x041b tx timeout
[ 2513.102757][T20792] Bluetooth: hci1: command 0x040f tx timeout
[ 2515.244677][T20792] Bluetooth: hci1: command 0x0419 tx timeout
[ 2520.537618][T20847] chnl_net:caif_netlink_parms(): no params data found
[ 2520.853197][T20800] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 2520.892158][T20800] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 2520.932902][T20800] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 2520.984659][T20800] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 2521.073666][T20800] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 2521.113961][T20800] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 2521.343933][T20800] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 2521.383492][T20800] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 2521.494815][T20800] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 2521.626347][T20800] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 2521.634066][T20800] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[ 2521.672787][T20800] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 2522.464692][T20792] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 2522.532741][T20792] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 2522.573156][T20792] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 2522.613430][T20792] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 2522.654414][T20792] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[ 2522.722888][T20792] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 2524.424658][T20792] Bluetooth: hci7: command 0x0409 tx timeout
[ 2524.461762][T20792] Bluetooth: hci8: command 0x0409 tx timeout
[ 2524.834191][T20800] Bluetooth: hci9: command 0x0409 tx timeout
03:17:22 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2526.584971][T20800] Bluetooth: hci8: command 0x041b tx timeout
[ 2526.591302][T20800] Bluetooth: hci7: command 0x041b tx timeout
[ 2526.904023][T20800] Bluetooth: hci9: command 0x041b tx timeout
[ 2528.673278][T20800] Bluetooth: hci7: command 0x040f tx timeout
[ 2528.712872][T20800] Bluetooth: hci8: command 0x040f tx timeout
[ 2528.983114][T20800] Bluetooth: hci9: command 0x040f tx timeout
[ 2529.733915][ T1237] ieee802154 phy0 wpan0: encryption failed: -22
[ 2529.772875][ T1237] ieee802154 phy1 wpan1: encryption failed: -22
03:17:27 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2530.913999][T20800] Bluetooth: hci8: command 0x0419 tx timeout
[ 2530.952449][T20792] Bluetooth: hci7: command 0x0419 tx timeout
[ 2531.195035][T20792] Bluetooth: hci9: command 0x0419 tx timeout
[ 2536.475935][T20847] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2536.483154][T20847] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2536.744202][T20800] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 2536.783227][T20800] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 2536.823623][T20800] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 2536.863134][T20800] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 2536.903936][T20800] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[ 2536.942908][T20800] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 2537.714128][T20847] bridge_slave_0: entered allmulticast mode
[ 2537.895909][T20847] bridge_slave_0: entered promiscuous mode
[ 2538.883779][T20847] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2539.584796][T20847] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2539.632596][T20800] Bluetooth: hci10: command 0x0409 tx timeout
[ 2540.193973][T20847] bridge_slave_1: entered allmulticast mode
[ 2540.450901][T20847] bridge_slave_1: entered promiscuous mode
[ 2541.713731][T20800] Bluetooth: hci10: command 0x041b tx timeout
[ 2543.803847][T20800] Bluetooth: hci10: command 0x040f tx timeout
[ 2545.443027][T20847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2545.847035][T20847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2545.884453][T20800] Bluetooth: hci10: command 0x0419 tx timeout
03:17:43 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2557.823843][T20792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2557.862972][T20792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2557.932370][T20792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2557.972656][T20792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2558.014259][T20792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2558.052724][T20792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2560.184738][T20800] Bluetooth: hci3: command 0x0409 tx timeout
[ 2562.262552][T20792] Bluetooth: hci3: command 0x041b tx timeout
[ 2562.563112][T20792] Bluetooth: hci2: command 0x0406 tx timeout
[ 2564.423534][T20792] Bluetooth: hci3: command 0x040f tx timeout
[ 2566.524054][T20800] Bluetooth: hci3: command 0x0419 tx timeout
03:18:09 executing program 0:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x4, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})

[ 2572.743180][T20798] Bluetooth: hci5: command 0x0406 tx timeout
[ 2572.782343][T20798] Bluetooth: hci4: command 0x0406 tx timeout
[ 2572.821947][T20798] Bluetooth: hci6: command 0x0406 tx timeout
[ 2581.202793][T29687] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2582.984766][T20792] Bluetooth: hci0: command 0x0406 tx timeout
03:18:20 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x3, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2583.984668][T20800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2584.023666][T20800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2584.062291][T20800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2584.104888][T20800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2584.182310][T20800] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 2584.282883][T20800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2586.463729][T31281] Bluetooth: hci1: command 0x0409 tx timeout
[ 2588.632408][T31281] Bluetooth: hci1: command 0x041b tx timeout
[ 2590.762865][T31281] Bluetooth: hci1: command 0x040f tx timeout
[ 2591.154804][ T1237] ieee802154 phy0 wpan0: encryption failed: -22
[ 2591.161195][ T1237] ieee802154 phy1 wpan1: encryption failed: -22
[ 2592.823623][T31281] Bluetooth: hci1: command 0x0419 tx timeout
03:18:31 executing program 5:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x4, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:18:31 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1800000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2596.443326][T20800] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[ 2596.513380][T20800] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[ 2596.552595][T20800] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[ 2596.594234][T20800] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[ 2596.632832][T20800] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[ 2596.672681][T20800] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[ 2598.854593][T20800] Bluetooth: hci11: command 0x0409 tx timeout
[ 2600.984117][T20800] Bluetooth: hci11: command 0x041b tx timeout
[ 2603.062573][T20800] Bluetooth: hci11: command 0x040f tx timeout
[ 2605.143192][T20800] Bluetooth: hci11: command 0x0419 tx timeout
03:18:43 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2608.402426][T31281] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[ 2608.522762][T31281] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[ 2608.564174][T31281] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[ 2608.753232][T31281] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[ 2608.792762][T31281] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[ 2608.833425][T31281] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[ 2609.493426][T20800] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[ 2609.532304][T20800] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[ 2609.573461][T20800] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[ 2609.613788][T20800] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[ 2609.655583][T20800] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[ 2609.663127][T20800] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[ 2611.064367][T20800] Bluetooth: hci12: command 0x0409 tx timeout
[ 2611.953402][T20800] Bluetooth: hci13: command 0x0409 tx timeout
[ 2613.143235][T20800] Bluetooth: hci12: command 0x041b tx timeout
[ 2614.132666][T20800] Bluetooth: hci13: command 0x041b tx timeout
[ 2615.232762][T20800] Bluetooth: hci12: command 0x040f tx timeout
[ 2616.184746][T20800] Bluetooth: hci13: command 0x040f tx timeout
[ 2617.393474][T20800] Bluetooth: hci12: command 0x0419 tx timeout
[ 2618.323055][T31281] Bluetooth: hci13: command 0x0419 tx timeout
[ 2621.094239][T20800] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[ 2621.204033][T20800] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[ 2621.242474][T20800] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[ 2621.283501][T20800] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
03:18:58 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2621.383902][T20800] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[ 2621.422030][T20800] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[ 2623.652701][T20800] Bluetooth: hci14: command 0x0409 tx timeout
[ 2625.714206][T20800] Bluetooth: hci14: command 0x041b tx timeout
[ 2627.817533][T20800] Bluetooth: hci14: command 0x040f tx timeout
[ 2629.882943][T20800] Bluetooth: hci14: command 0x0419 tx timeout
[ 2632.207804][T31281] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[ 2632.243341][T31281] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[ 2632.283761][T31281] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[ 2632.323919][T31281] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[ 2632.362608][T31281] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3
[ 2632.402810][T31281] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[ 2634.514635][T20800] Bluetooth: hci15: command 0x0409 tx timeout
[ 2636.613957][T20800] Bluetooth: hci15: command 0x041b tx timeout
[ 2638.752597][T31281] Bluetooth: hci15: command 0x040f tx timeout
[ 2640.913312][T31281] Bluetooth: hci15: command 0x0419 tx timeout
[ 2644.503936][T20888] Bluetooth: hci7: command 0x0406 tx timeout
[ 2644.542902][T20888] Bluetooth: hci8: command 0x0406 tx timeout
03:19:24 executing program 0:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x4, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})

[ 2649.547467][T20800] Bluetooth: hci9: command 0x0406 tx timeout
[ 2652.634367][ T1237] ieee802154 phy0 wpan0: encryption failed: -22
[ 2652.672476][ T1237] ieee802154 phy1 wpan1: encryption failed: -22
[ 2654.953640][T29687] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2659.783167][T20800] Bluetooth: hci10: command 0x0406 tx timeout
03:19:37 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x3, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2660.443418][T20888] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2660.483151][T20888] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2660.552993][T20888] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2660.594323][T20888] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2660.833525][T20888] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2660.872127][T20888] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2663.284545][T31281] Bluetooth: hci3: command 0x0409 tx timeout
[ 2665.542318][T31281] Bluetooth: hci3: command 0x041b tx timeout
[ 2667.632394][T31281] Bluetooth: hci3: command 0x040f tx timeout
[ 2669.814648][T31281] Bluetooth: hci3: command 0x0419 tx timeout
[ 2671.744005][T20888] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[ 2671.782900][T20888] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[ 2671.822644][T20888] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[ 2671.983265][T20888] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[ 2672.022542][T20888] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3
[ 2672.063190][T20888] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
03:19:49 executing program 5:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x4, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2674.184613][T31281] Bluetooth: hci16: command 0x0409 tx timeout
[ 2676.293464][T31281] Bluetooth: hci16: command 0x041b tx timeout
[ 2678.383714][T31281] Bluetooth: hci16: command 0x040f tx timeout
[ 2679.623598][T29687] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2680.583337][T31281] Bluetooth: hci16: command 0x0419 tx timeout
03:19:59 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1800000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2687.982764][T20888] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[ 2688.022659][T20888] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[ 2688.064307][T20888] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[ 2688.114763][T20888] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[ 2688.153557][T20888] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3
[ 2688.193363][T20888] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[ 2690.644910][T20888] Bluetooth: hci17: command 0x0409 tx timeout
[ 2692.684578][T20888] Bluetooth: hci17: command 0x041b tx timeout
03:20:11 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2694.742548][T20888] Bluetooth: hci17: command 0x040f tx timeout
[ 2696.862310][T20888] Bluetooth: hci17: command 0x0419 tx timeout
[ 2698.525822][T31281] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[ 2698.563104][T31281] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[ 2698.651485][T31281] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[ 2698.814685][T31281] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[ 2698.852549][T31281] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3
[ 2698.896646][T31281] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[ 2701.302736][T31281] Bluetooth: hci18: command 0x0409 tx timeout
[ 2703.382478][T31281] Bluetooth: hci18: command 0x041b tx timeout
[ 2705.464071][T31281] Bluetooth: hci18: command 0x040f tx timeout
[ 2706.364791][T20888] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1
[ 2706.411897][T20888] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9
[ 2706.483434][T20888] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9
[ 2706.523193][T20888] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4
[ 2706.563879][T20888] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3
[ 2706.602771][T20888] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2
03:20:23 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2707.543849][T31281] Bluetooth: hci18: command 0x0419 tx timeout
[ 2708.794490][T31281] Bluetooth: hci19: command 0x0409 tx timeout
[ 2710.933054][T20888] Bluetooth: hci19: command 0x041b tx timeout
[ 2711.002669][T20888] Bluetooth: hci1: command 0x0406 tx timeout
[ 2713.014785][T31281] Bluetooth: hci19: command 0x040f tx timeout
[ 2714.092968][ T1237] ieee802154 phy0 wpan0: encryption failed: -22
[ 2714.162852][ T1237] ieee802154 phy1 wpan1: encryption failed: -22
[ 2715.073574][T31281] Bluetooth: hci19: command 0x0419 tx timeout
[ 2718.272650][T20888] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1
[ 2718.312241][T20888] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9
[ 2718.353200][T20888] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9
[ 2718.394484][T20888] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4
[ 2718.432625][T20888] Bluetooth: hci20: unexpected cc 0x0c25 length: 249 > 3
[ 2718.473017][T20888] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2
[ 2720.836269][T31281] Bluetooth: hci20: command 0x0409 tx timeout
[ 2721.384589][T31281] Bluetooth: hci11: command 0x0406 tx timeout
[ 2722.903316][T31281] Bluetooth: hci20: command 0x041b tx timeout
03:20:40 executing program 0:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x4, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})

[ 2725.073888][T20888] Bluetooth: hci20: command 0x040f tx timeout
[ 2727.164588][T20888] Bluetooth: hci20: command 0x0419 tx timeout
[ 2731.563724][T31281] Bluetooth: hci12: command 0x0406 tx timeout
[ 2735.324516][T20800] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1
[ 2735.363220][T20800] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9
[ 2735.402692][T20800] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9
[ 2735.444091][T20800] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4
[ 2735.483836][T20800] Bluetooth: hci21: unexpected cc 0x0c25 length: 249 > 3
[ 2735.522719][T20800] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2
[ 2736.670129][T20800] Bluetooth: hci13: command 0x0406 tx timeout
[ 2737.724699][T20800] Bluetooth: hci21: command 0x0409 tx timeout
03:20:54 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x3, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2739.854065][T20888] Bluetooth: hci21: command 0x041b tx timeout
[ 2741.962840][T20888] Bluetooth: hci21: command 0x040f tx timeout
[ 2744.032652][T20888] Bluetooth: hci21: command 0x0419 tx timeout
[ 2746.854737][T20800] Bluetooth: hci14: command 0x0406 tx timeout
03:21:06 executing program 5:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x4, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2749.843189][T20974] chnl_net:caif_netlink_parms(): no params data found
[ 2753.233560][T20800] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1
[ 2753.333303][T20800] Bluetooth: hci22: unexpected cc 0x1003 length: 249 > 9
[ 2753.373128][T20800] Bluetooth: hci22: unexpected cc 0x1001 length: 249 > 9
[ 2753.413541][T20800] Bluetooth: hci22: unexpected cc 0x0c23 length: 249 > 4
[ 2753.453294][T20800] Bluetooth: hci22: unexpected cc 0x0c25 length: 249 > 3
[ 2753.493725][T20800] Bluetooth: hci22: unexpected cc 0x0c38 length: 249 > 2
[ 2755.873101][T20888] Bluetooth: hci22: command 0x0409 tx timeout
[ 2757.063244][T20888] Bluetooth: hci15: command 0x0406 tx timeout
[ 2757.953262][T20888] Bluetooth: hci22: command 0x041b tx timeout
03:21:16 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1800000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2760.024587][T20800] Bluetooth: hci22: command 0x040f tx timeout
[ 2761.346737][T20974] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2761.353947][T20974] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2761.603204][T20974] bridge_slave_0: entered allmulticast mode
[ 2762.122278][T20800] Bluetooth: hci22: command 0x0419 tx timeout
[ 2762.224245][T20974] bridge_slave_0: entered promiscuous mode
[ 2763.104810][T20974] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2763.634738][T20974] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2764.082461][T20888] Bluetooth: hci23: unexpected cc 0x0c03 length: 249 > 1
[ 2764.273114][T20888] Bluetooth: hci23: unexpected cc 0x1003 length: 249 > 9
[ 2764.372343][T20888] Bluetooth: hci23: unexpected cc 0x1001 length: 249 > 9
[ 2764.594665][T20888] Bluetooth: hci23: unexpected cc 0x0c23 length: 249 > 4
[ 2764.634778][T20888] Bluetooth: hci23: unexpected cc 0x0c25 length: 249 > 3
[ 2764.754160][T20888] Bluetooth: hci23: unexpected cc 0x0c38 length: 249 > 2
[ 2764.904501][T20974] bridge_slave_1: entered allmulticast mode
[ 2765.424668][T20974] bridge_slave_1: entered promiscuous mode
[ 2767.233358][T20888] Bluetooth: hci23: command 0x0409 tx timeout
[ 2768.787647][T20974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2769.302752][T20888] Bluetooth: hci23: command 0x041b tx timeout
[ 2769.347207][T20974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2771.414681][T20888] Bluetooth: hci23: command 0x040f tx timeout
03:21:29 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2773.405222][T20800] Bluetooth: hci24: unexpected cc 0x0c03 length: 249 > 1
[ 2773.412877][T20800] Bluetooth: hci24: unexpected cc 0x1003 length: 249 > 9
[ 2773.492371][T20800] Bluetooth: hci23: command 0x0419 tx timeout
[ 2773.564654][T31281] Bluetooth: hci24: unexpected cc 0x1001 length: 249 > 9
[ 2773.772401][T31281] Bluetooth: hci24: unexpected cc 0x0c23 length: 249 > 4
[ 2773.985991][T20974] team0: Port device team_slave_0 added
[ 2774.076811][T31281] Bluetooth: hci24: unexpected cc 0x0c25 length: 249 > 3
[ 2774.112756][T31281] Bluetooth: hci24: unexpected cc 0x0c38 length: 249 > 2
[ 2774.504358][T20974] team0: Port device team_slave_1 added
[ 2775.513371][ T1237] ieee802154 phy0 wpan0: encryption failed: -22
[ 2775.552606][ T1237] ieee802154 phy1 wpan1: encryption failed: -22
[ 2776.392826][T31281] Bluetooth: hci24: command 0x0409 tx timeout
[ 2778.553794][T31281] Bluetooth: hci24: command 0x041b tx timeout
[ 2778.814599][T20974] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2779.404540][T20974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2780.662415][T31281] Bluetooth: hci24: command 0x040f tx timeout
[ 2780.702943][T20974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2781.752435][T20974] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2782.294694][T20974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2782.741980][T31281] Bluetooth: hci24: command 0x0419 tx timeout
[ 2783.134741][T20974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
03:21:40 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2787.902687][T20888] Bluetooth: hci3: command 0x0406 tx timeout
[ 2789.804646][T20800] Bluetooth: hci25: unexpected cc 0x0c03 length: 249 > 1
[ 2789.882389][T20800] Bluetooth: hci25: unexpected cc 0x1003 length: 249 > 9
[ 2789.924179][T20800] Bluetooth: hci25: unexpected cc 0x1001 length: 249 > 9
[ 2789.963014][T20800] Bluetooth: hci25: unexpected cc 0x0c23 length: 249 > 4
[ 2790.002970][T20800] Bluetooth: hci25: unexpected cc 0x0c25 length: 249 > 3
[ 2790.043740][T20800] Bluetooth: hci25: unexpected cc 0x0c38 length: 249 > 2
[ 2792.724610][T31281] Bluetooth: hci25: command 0x0409 tx timeout
[ 2794.902505][T31281] Bluetooth: hci25: command 0x041b tx timeout
[ 2797.012358][T20888] Bluetooth: hci25: command 0x040f tx timeout
[ 2798.141099][T20888] Bluetooth: hci16: command 0x0406 tx timeout
[ 2799.063663][T20888] Bluetooth: hci25: command 0x0419 tx timeout
[ 2801.234567][T20888] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1
[ 2801.272310][T20888] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9
[ 2801.314492][T20888] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9
[ 2801.353491][T20888] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4
[ 2801.393974][T20888] Bluetooth: hci21: unexpected cc 0x0c25 length: 249 > 3
[ 2801.432455][T20888] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2
03:22:00 executing program 0:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x4, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})

[ 2803.814386][T20888] Bluetooth: hci21: command 0x0409 tx timeout
[ 2806.033639][T20888] Bluetooth: hci21: command 0x041b tx timeout
[ 2808.124345][T20888] Bluetooth: hci21: command 0x040f tx timeout
[ 2810.202851][T31281] Bluetooth: hci21: command 0x0419 tx timeout
[ 2813.504606][T20888] Bluetooth: hci17: command 0x0406 tx timeout
[ 2814.634791][T21018] chnl_net:caif_netlink_parms(): no params data found
03:22:13 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x3, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2817.465259][T20888] Bluetooth: hci26: unexpected cc 0x0c03 length: 249 > 1
[ 2817.472777][T20888] Bluetooth: hci26: unexpected cc 0x1003 length: 249 > 9
[ 2817.608710][T20888] Bluetooth: hci26: unexpected cc 0x1001 length: 249 > 9
[ 2817.644268][T20888] Bluetooth: hci26: unexpected cc 0x0c23 length: 249 > 4
[ 2817.683145][T20888] Bluetooth: hci26: unexpected cc 0x0c25 length: 249 > 3
[ 2817.722784][T20888] Bluetooth: hci26: unexpected cc 0x0c38 length: 249 > 2
[ 2820.023762][T20888] Bluetooth: hci26: command 0x0409 tx timeout
[ 2822.194688][T31281] Bluetooth: hci26: command 0x041b tx timeout
[ 2822.394501][T21018] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2822.734394][T21018] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2823.142890][T21018] bridge_slave_0: entered allmulticast mode
[ 2823.390318][T21018] bridge_slave_0: entered promiscuous mode
[ 2823.624480][T31281] Bluetooth: hci18: command 0x0406 tx timeout
[ 2824.273400][T20888] Bluetooth: hci26: command 0x040f tx timeout
[ 2824.614781][T21018] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2824.834638][T21018] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2825.593023][T21018] bridge_slave_1: entered allmulticast mode
[ 2825.824137][T21018] bridge_slave_1: entered promiscuous mode
[ 2826.423366][T20888] Bluetooth: hci26: command 0x0419 tx timeout
03:22:23 executing program 5:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x4, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x4, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2830.812705][T31281] Bluetooth: hci27: unexpected cc 0x0c03 length: 249 > 1
[ 2830.883137][T31281] Bluetooth: hci27: unexpected cc 0x1003 length: 249 > 9
[ 2830.922413][T31281] Bluetooth: hci27: unexpected cc 0x1001 length: 249 > 9
[ 2830.963263][T31281] Bluetooth: hci27: unexpected cc 0x0c23 length: 249 > 4
[ 2831.003795][T31281] Bluetooth: hci27: unexpected cc 0x0c25 length: 249 > 3
[ 2831.042811][T31281] Bluetooth: hci27: unexpected cc 0x0c38 length: 249 > 2
[ 2832.135843][T21018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2833.093926][T21018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2833.623242][T20888] Bluetooth: hci27: command 0x0409 tx timeout
[ 2833.882612][T20888] Bluetooth: hci19: command 0x0406 tx timeout
[ 2835.703350][T20888] Bluetooth: hci27: command 0x041b tx timeout
[ 2836.933078][ T1237] ieee802154 phy0 wpan0: encryption failed: -22
[ 2836.971845][ T1237] ieee802154 phy1 wpan1: encryption failed: -22
[ 2837.853784][T31281] Bluetooth: hci27: command 0x040f tx timeout
03:22:35 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
ioctl$FIOCLEX(r0, 0x5451)
r2 = getpid()
process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101280)
recvmmsg$unix(r3, &(0x7f0000003600)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000001340)=""/248, 0xf8}], 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="829ab5000000010000000100", @ANYRES32, @ANYBLOB="100000000100000001000000", @ANYRES64, @ANYBLOB="180000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000140000226690000", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1800000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f00000038c0)=""/262, 0x106}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/54, 0x36}], 0x5, &(0x7f0000001900)}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f0000001dc0)=""/148, 0x94}], 0x5, &(0x7f0000003a00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000002000)=""/50, 0x32}, {&(0x7f0000002040)=""/182, 0xb6}], 0x4, &(0x7f0000002140)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x54}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003540)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000003400)=""/39, 0x27}, {&(0x7f0000003440)=""/92, 0x5c}, {&(0x7f00000034c0)=""/69, 0x45}], 0x5, &(0x7f0000003580)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x78}}], 0x5, 0x20, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2}}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r10], 0x24}}, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0xc4102, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x40000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[ 2839.732786][T20888] Bluetooth: hci28: unexpected cc 0x0c03 length: 249 > 1
[ 2839.773239][T21018] team0: Port device team_slave_0 added
[ 2839.813940][T20888] Bluetooth: hci28: unexpected cc 0x1003 length: 249 > 9
[ 2839.853148][T20888] Bluetooth: hci28: unexpected cc 0x1001 length: 249 > 9
[ 2839.893998][T20888] Bluetooth: hci28: unexpected cc 0x0c23 length: 249 > 4
[ 2839.932663][T20888] Bluetooth: hci28: unexpected cc 0x0c25 length: 249 > 3
[ 2839.971886][T20800] Bluetooth: hci27: command 0x0419 tx timeout
[ 2840.013904][T20888] Bluetooth: hci28: unexpected cc 0x0c38 length: 249 > 2
[ 2840.507217][T21018] team0: Port device team_slave_1 added
[ 2842.383028][T31281] Bluetooth: hci28: command 0x0409 tx timeout
[ 2844.172672][T31281] Bluetooth: hci20: command 0x0406 tx timeout
[ 2844.522333][T31281] Bluetooth: hci28: command 0x041b tx timeout
[ 2846.583636][T20888] Bluetooth: hci28: command 0x040f tx timeout
[ 2848.664108][T20888] Bluetooth: hci28: command 0x0419 tx timeout
03:22:46 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d0040}, {0x80000000, 0x0, 0x0, 0xffffffff}]})

[ 2850.374594][   T29] INFO: task syz-executor.0:20795 blocked for more than 143 seconds.
[ 2850.411959][   T29]       Not tainted 6.7.0-syzkaller-01193-g6c1dd1fe5d8a #0
[ 2850.574546][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2850.806871][   T29] task:syz-executor.0  state:D stack:27344 pid:20795 tgid:20795 ppid:1      flags:0x20004006
[ 2851.363556][   T29] Call Trace:
[ 2851.873471][   T29]  <TASK>
[ 2852.543314][   T29]  __schedule+0xf12/0x5c00
[ 2852.594717][   T29]  ? io_schedule_timeout+0x150/0x150
[ 2853.152645][   T29]  ? lock_release+0x4bf/0x690
[ 2853.463148][   T29]  ? schedule+0x1fc/0x270
[ 2853.952660][   T29]  ? reacquire_held_locks+0x4c0/0x4c0
[ 2854.214727][   T29]  ? __mutex_lock+0x5b4/0x9d0
[ 2854.584699][   T29]  ? __mutex_trylock_common+0x78/0x250
[ 2854.684534][T31281] Bluetooth: hci29: unexpected cc 0x0c03 length: 249 > 1
[ 2854.782745][T31281] Bluetooth: hci29: unexpected cc 0x1003 length: 249 > 9
[ 2854.924687][T31281] Bluetooth: hci29: unexpected cc 0x1001 length: 249 > 9
[ 2855.043388][T31281] Bluetooth: hci29: unexpected cc 0x0c23 length: 249 > 4
[ 2855.112831][T31281] Bluetooth: hci29: unexpected cc 0x0c25 length: 249 > 3
[ 2855.153299][T31281] Bluetooth: hci29: unexpected cc 0x0c38 length: 249 > 2
[ 2855.422418][   T29]  ? mutex_is_locked+0x40/0x40
[ 2855.534659][   T29]  ? spin_bug+0x1d0/0x1d0
[ 2855.692880][   T29]  schedule+0xe9/0x270
[ 2855.934653][   T29]  schedule_preempt_disabled+0x13/0x20
[ 2856.042435][   T29]  __mutex_lock+0x5b9/0x9d0
[ 2856.252255][   T29]  ? netdev_run_todo+0x85b/0x12e0
[ 2856.442458][   T29]  ? ip_tunnel_delete_nets+0x95/0x400
[ 2856.695036][   T29]  ? mutex_trylock+0x130/0x130
[ 2856.774930][   T29]  ? unregister_netdevice_many+0x20/0x20
[ 2856.781281][   T29]  ? ip_tunnel_delete_nets+0x95/0x400
[ 2857.124533][   T29]  ? rtnl_lock+0x9/0x20
[ 2857.694418][   T29]  ip_tunnel_delete_nets+0x95/0x400
[ 2857.763152][   T29]  ? ip_tunnel_dellink+0x270/0x270
[ 2858.164104][   T29]  ? kvfree+0x47/0x50
[ 2858.494156][   T29]  ? preempt_count_sub+0x160/0x160
[ 2858.764803][   T29]  ? ipgre_exit_batch_net+0x30/0x30
[ 2859.374117][   T29]  ops_exit_list+0x125/0x170
[ 2859.494632][   T29]  setup_net+0x64d/0xa40
[ 2859.642775][   T29]  ? register_pernet_device+0x70/0x70
[ 2859.893411][   T29]  ? read_word_at_a_time+0xe/0x20
[ 2860.275195][   T29]  copy_net_ns+0x2f1/0x660
[ 2860.279697][   T29]  create_new_namespaces+0x3ea/0xb10