300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000196c00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:02 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x0, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r2, 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x5, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000100)={"570349115ca64153b07d599b8bfbf1c61f64b414ed9b365ddc364693d755e8bd", r8}) 01:36:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000280)={0x60001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2107.394006][T19013] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:02 executing program 1: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x22040, 0x0) open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='('], 0x0) 01:36:02 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x0, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r2, 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x5, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000100)={"570349115ca64153b07d599b8bfbf1c61f64b414ed9b365ddc364693d755e8bd", r8}) [ 2107.477707][T19017] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2107.500702][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2107.516154][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2107.548587][T19023] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2107.560381][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2107.570406][T19032] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:36:02 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) [ 2107.597402][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2107.631320][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 01:36:02 executing program 1: io_setup(0x9, &(0x7f0000000040)=0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) dup3(r2, r1, 0x0) io_submit(r0, 0x1, &(0x7f0000000380)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 01:36:02 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x0, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r2, 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x0, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x5, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r7, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000100)={"570349115ca64153b07d599b8bfbf1c61f64b414ed9b365ddc364693d755e8bd", r9}) [ 2107.666668][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2107.693579][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 01:36:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000196d00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) [ 2107.710554][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 01:36:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000280)={0x60001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:02 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x0, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r2, 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x0, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x5, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r7, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000100)={"570349115ca64153b07d599b8bfbf1c61f64b414ed9b365ddc364693d755e8bd", r9}) [ 2107.760088][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2107.788366][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2107.797501][T19045] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2107.836121][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2107.845078][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2107.855653][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2107.863264][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2107.871354][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2107.879547][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2107.888387][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2107.903644][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2107.911622][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2107.919504][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2107.927378][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2107.935746][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2107.943281][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2107.954166][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2107.961765][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2107.969722][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2107.977855][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2107.986035][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2107.993553][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.001508][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.009428][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.017368][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.025244][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.032789][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.040731][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.048693][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.057354][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.065335][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.072878][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.080831][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.088942][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.096797][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.104648][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.112195][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.120116][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.128059][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.135908][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.143432][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.151732][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.160173][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.170743][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.178609][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.186421][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.194818][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.202359][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.210282][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.218117][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.234488][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.249720][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.273434][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.281129][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.304242][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.311714][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.334061][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.341461][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.364103][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.371502][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.394038][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.401979][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.423988][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.431436][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.444687][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.452128][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.459808][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.468092][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.475586][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.483016][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.490508][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.498303][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.505794][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.513218][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.520770][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.543452][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.551294][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.573986][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.581409][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.604038][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.611441][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.634015][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.641433][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.664115][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.671907][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.694043][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.701455][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.724102][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.731548][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.754291][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.761732][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.784358][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.791780][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.814051][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.821467][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.844096][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.851553][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.859376][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.866895][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.875075][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.882507][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.891483][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.906774][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.922090][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.929764][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.937494][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.945312][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.952806][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.960362][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.967999][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.977147][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.984820][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2108.992341][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.000239][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.008160][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.016367][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.024469][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.032112][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.039812][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.047520][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.055200][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.062827][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.070545][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.079132][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.086857][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.094552][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.102166][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.110083][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.118256][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.126256][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.133970][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.141601][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.149287][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.156980][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.164816][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.172410][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.180900][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.188573][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.196302][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.203979][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.211570][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.219866][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.227527][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.235540][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.243113][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.251124][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.258751][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.266484][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.274176][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.282568][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.290521][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.298210][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.305926][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.313519][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.321450][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.329353][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.337034][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.345892][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.353469][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.361334][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.369321][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.376986][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.385439][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.393013][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.400711][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.408372][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.416118][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.425857][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.433456][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.441362][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.449057][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.456922][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.464734][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.472318][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.480225][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.488845][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.496560][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.505370][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.513593][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.521692][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.529876][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.537556][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.545433][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.553006][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.560666][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.568513][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.576281][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.584110][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.614031][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.621445][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.644017][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.651573][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.674188][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.681641][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.689421][T14074] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 2109.710508][T19046] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2109.730894][T14074] hid-generic 0000:0000:0000.0061: hidraw0: HID v0.00 Device [syz0] on syz1 [ 2109.764156][T19038] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:04 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/9, 0x9}}, 0x120) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x4) write$UHID_CREATE(r0, &(0x7f0000000480)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000180)=""/202, 0xca}}, 0x120) 01:36:04 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0xdbfc3bc3b5fa2207) 01:36:04 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000280)={0x60001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:04 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x0, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r2, 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x0, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x5, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r7, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000100)={"570349115ca64153b07d599b8bfbf1c61f64b414ed9b365ddc364693d755e8bd", r9}) [ 2109.780741][T19051] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:36:04 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, &(0x7f0000000000), r1, 0x0, 0xd8, 0x0) 01:36:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000196e00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) [ 2109.948971][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2109.971457][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2109.977584][T19068] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:04 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x0, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r2, 0xffffffffffffffff}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000000)={0x5, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x5, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r6, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000100)={"570349115ca64153b07d599b8bfbf1c61f64b414ed9b365ddc364693d755e8bd", r8}) [ 2110.002141][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.040210][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 01:36:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000280)={0x60001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:04 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}}, 0x0) [ 2110.063057][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.074524][T19069] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2110.080383][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.093697][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 01:36:04 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x0, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r2, 0xffffffffffffffff}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000000)={0x5, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x5, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r6, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000100)={"570349115ca64153b07d599b8bfbf1c61f64b414ed9b365ddc364693d755e8bd", r8}) [ 2110.106200][T19072] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2110.123789][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.131531][T19073] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2110.142358][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.160638][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.175823][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.183533][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.192188][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.200898][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.209156][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.217206][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.225549][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.233180][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.241285][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.249329][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.257649][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.265707][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.273340][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.281471][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.289464][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.297426][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.305861][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.313612][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.321865][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.329978][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.338111][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.346209][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.354246][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.362010][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.372976][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.381167][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.389506][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.397704][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.406001][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.414143][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.422002][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.430416][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.438611][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.446852][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.455075][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.462925][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.471591][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.479980][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.488167][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.496287][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.504401][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.512331][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.520762][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.528961][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.537114][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.545370][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.553185][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.561447][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.569571][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.577677][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.585750][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.593550][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.601772][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.609815][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.618287][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.626353][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.634433][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.642215][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.650393][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.658476][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.666550][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.676094][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.700287][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.708957][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.719582][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.728067][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.737475][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.747819][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.755766][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.763425][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.771513][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.779464][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.787738][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.795691][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.803349][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.811700][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.819890][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.828868][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.837230][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.845299][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.853085][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.861298][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.869838][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.878002][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.886054][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.894103][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.901897][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.909980][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.918097][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.926153][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.934114][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.941785][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.950130][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.958125][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.966181][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.974176][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.981993][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.990031][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2110.998095][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.006127][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.014106][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.021999][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.030176][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.038160][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.046205][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.054183][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.062002][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.070075][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.078152][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.086128][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.094106][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.101895][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.110037][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.118049][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.128390][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.136495][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.144533][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.152369][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.160446][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.168447][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.176473][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.184622][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.192405][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.200780][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.208811][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.216934][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.225045][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.232889][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.241064][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.249120][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.257126][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.265157][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.272945][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.281067][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.289068][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.297117][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.305541][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.313352][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.321368][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.329679][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.337628][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.346427][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.354457][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.362263][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.370306][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.378399][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.386411][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.394433][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.402213][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.410314][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.418509][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.426579][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.434691][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.442509][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.450572][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.460752][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.468804][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.476790][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.484830][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.492615][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.500716][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.508974][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.517012][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.525177][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.533092][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.541214][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.549360][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.557348][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.565399][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.573175][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.581263][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.589350][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.597371][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.605350][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.613168][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.621197][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.629215][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.637350][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.645403][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.653201][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.661329][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.669325][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.677307][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.685305][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.693113][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.701204][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.709225][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.717229][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.725284][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.733107][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.741354][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.749640][ T3933] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 2111.759334][ T3933] hid-generic 0000:0000:0000.0062: hidraw0: HID v0.00 Device [syz0] on syz1 01:36:06 executing program 1: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000340)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x5, 0xa) 01:36:06 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE(r0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x4) write$UHID_CREATE(r0, &(0x7f0000000480)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000180)=""/202, 0xca}}, 0x120) 01:36:06 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x0, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r2, 0xffffffffffffffff}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000000)={0x5, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x5, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r6, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000100)={"570349115ca64153b07d599b8bfbf1c61f64b414ed9b365ddc364693d755e8bd", r8}) 01:36:06 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000196f00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000280)={0x60001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:06 executing program 1: open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) [ 2111.969593][T19090] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2111.970035][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.005969][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 01:36:06 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x0, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r2, 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x5, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r7, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000100)={"570349115ca64153b07d599b8bfbf1c61f64b414ed9b365ddc364693d755e8bd", r8}) [ 2112.022502][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.039286][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.056263][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.072756][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.094056][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.101510][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.124130][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.131577][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.139553][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.148189][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.155903][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.163332][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.171091][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.178753][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.187472][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.196830][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.204556][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.211987][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.219714][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.227370][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.235059][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.242449][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.250930][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.258629][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.266313][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.273705][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.281484][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.289406][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.297742][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.305699][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.313128][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.320872][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.328539][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.336181][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.343574][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.351285][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.374072][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.381502][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.411865][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.434018][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.441424][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.454047][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.461792][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.484068][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.491666][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.514061][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.521466][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.534411][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.541820][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.550608][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.559155][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.566828][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.574461][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.581886][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.591045][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.599109][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.606766][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.614447][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.621838][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.629590][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.637228][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.645028][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.652422][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.660623][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.668420][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.676080][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.683503][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.691185][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.699194][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.707100][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.714823][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.722300][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.730104][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.737797][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.745614][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.753091][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.761464][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.770222][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.778121][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.794274][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.802166][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.811926][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.819865][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.827751][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.835678][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.843253][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.851299][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.859208][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.869359][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.877542][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.885476][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.893054][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.901437][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.913316][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.921312][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.929400][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.937310][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.945282][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.952869][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.960889][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.969500][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.977527][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.985549][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2112.993138][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.001167][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.009382][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.017306][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.025977][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.033600][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.042911][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.050810][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.058701][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.066577][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.074984][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.082598][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.090630][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.098569][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.106826][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.114703][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.122295][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.130309][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.138424][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.146428][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.154373][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.162029][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.170072][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.178676][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.186823][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.195087][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.202722][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.211004][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.218980][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.226929][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.234933][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.242566][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.250649][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.263426][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.271491][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.280016][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.288013][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.296096][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.303730][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.312188][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.320136][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.328165][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.336130][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.343755][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.351830][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.359777][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.367724][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.376820][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.386688][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.394737][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.402380][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.410486][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.418879][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.426949][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.434936][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.442575][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.450664][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.458619][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.466575][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.474512][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.482821][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.491348][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.499309][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.507582][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.515791][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.523426][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.531504][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.539462][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.547456][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.555447][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.563088][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.571091][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.579034][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.587788][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.596156][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.603771][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.613598][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.621832][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.629799][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.637691][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.645788][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.653411][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.661469][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.669646][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.677570][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.686100][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.693726][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.703718][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.712053][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.720426][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.728379][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.736461][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.744828][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.752477][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.760712][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.768716][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 2113.776701][ T5454] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 01:36:08 executing program 1: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2040, 0x0) syncfs(r0) fsync(r0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 01:36:08 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x0, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r2, 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x5, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r7, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000100)={"570349115ca64153b07d599b8bfbf1c61f64b414ed9b365ddc364693d755e8bd", r8}) [ 2113.793674][T19093] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2113.807487][ T5454] hid-generic 0000:0000:0000.0063: hidraw0: HID v0.00 Device [syz0] on syz1 [ 2113.836256][T19095] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:08 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) [ 2113.854840][T19100] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:36:08 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE(r0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x4) write$UHID_CREATE(r0, &(0x7f0000000480)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000180)=""/202, 0xca}}, 0x120) 01:36:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000280)={0x60001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000197000000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:08 executing program 1: splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xb, 0xb755ae27bc4737cd) 01:36:08 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x0, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r2, 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x5, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r7, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000100)={"570349115ca64153b07d599b8bfbf1c61f64b414ed9b365ddc364693d755e8bd", r8}) [ 2114.009965][T19111] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2114.022656][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.036674][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.061294][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.085744][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.105543][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.113007][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.126297][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.144131][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.151527][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.174061][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.181444][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.189078][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.197068][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.204607][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.212000][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.219537][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.227410][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.234904][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.242292][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.249830][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.257474][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.265318][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.272712][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.280299][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.287829][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.295370][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.302968][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.310872][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.318451][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.325961][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.333433][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.340994][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.348601][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.356146][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.363606][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.371188][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.379081][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.386968][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.394669][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.402255][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.410014][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.433478][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.447902][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.463887][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.471290][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.494335][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.511740][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.524196][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.531586][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.539738][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.547716][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.556619][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.571855][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.587098][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.603685][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.618955][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.634077][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.641524][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.649855][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.657676][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.665438][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.672905][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.680736][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.688501][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.696321][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.703805][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.711769][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.720350][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.728259][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.736239][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.744206][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.751841][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.759929][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.767911][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.778033][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.786257][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.794108][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.801766][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.809919][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.817784][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.826048][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.833699][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.841728][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.849703][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.857662][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.865796][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.873459][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.881469][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.889382][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.897256][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.905133][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.913034][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.921061][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.928955][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.944125][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.951803][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.960607][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.968726][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.976694][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.984673][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2114.992358][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.000435][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.008394][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.016476][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.024394][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.032069][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.040130][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.048226][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.056273][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.064377][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.072055][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.080329][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.088308][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.096318][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.104384][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.112064][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.120269][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.128325][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.136305][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.144272][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.151947][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.160106][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.168107][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.176056][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.183766][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.192189][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.200513][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.208576][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.218542][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.226662][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.234646][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.242366][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.250526][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.258483][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.266830][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.274857][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.282533][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.290657][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.299160][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.307136][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.315138][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.322969][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.331043][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.339029][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.347002][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.354973][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.362677][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.370803][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.378807][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.386838][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.394813][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.402494][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.410814][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.419243][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.427298][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.435344][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.443016][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.451066][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.459021][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.467061][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.475089][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.482811][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.490944][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.498973][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.507100][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.515089][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.522808][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.531274][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.539245][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.548834][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.556801][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.564788][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.572456][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.580598][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.588599][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.596576][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.604376][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.611772][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.619657][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.627382][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.635485][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.642883][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.650687][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.658408][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.666481][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.674253][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.681646][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.689422][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.697139][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.704883][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.712273][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.720083][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.727772][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.735630][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.743030][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.764376][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.771776][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.794115][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.801503][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.829760][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.838042][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.845850][ T3935] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 2115.854933][ T3935] hid-generic 0000:0000:0000.0064: hidraw0: HID v0.00 Device [syz0] on syz1 01:36:10 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE(r0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x4) write$UHID_CREATE(r0, &(0x7f0000000480)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000180)=""/202, 0xca}}, 0x120) 01:36:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004b"], 0x38}}, 0x0) 01:36:10 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x0, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r2, 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x5, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x0, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r7, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000100)={"570349115ca64153b07d599b8bfbf1c61f64b414ed9b365ddc364693d755e8bd", r9}) [ 2115.907500][T19114] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2115.941812][T19121] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:10 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000280)={0x60001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2116.016448][T19121] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2116.016746][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.056219][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 01:36:10 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x0, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r2, 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x5, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x0, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r7, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000100)={"570349115ca64153b07d599b8bfbf1c61f64b414ed9b365ddc364693d755e8bd", r9}) [ 2116.096961][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.109393][T19132] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2116.132540][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.142665][T19133] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2116.150396][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.172681][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.186396][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.204040][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.217605][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.234509][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.250887][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.268714][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.284035][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.291514][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.299538][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.307471][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.315380][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.322774][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.330709][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.338518][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.348693][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.356459][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.364242][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.371704][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.379558][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.387717][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.395504][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.402900][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.410788][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.418542][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.426462][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.434229][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.441619][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.451520][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.459250][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.484237][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.491618][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.514022][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.521415][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.544286][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.552058][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.573980][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.581407][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.604017][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.611434][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.634063][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.641462][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.664019][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.671431][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.694025][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.701463][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.724078][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.731495][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.754023][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.773982][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.781421][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.789274][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.797222][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.804945][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.812367][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.819959][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.843146][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.858146][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.865792][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.873185][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.880922][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.888398][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.896203][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.903592][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.911346][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.918985][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.926909][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.934591][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.941981][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.951515][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.960814][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.968559][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.976211][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.983631][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2116.991295][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.014119][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.021510][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.044022][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.051444][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.081183][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.094089][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.101673][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.114961][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.122360][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.130374][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.138179][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.145915][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.153306][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.161128][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.169478][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.177860][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.185736][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.193127][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.201528][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.209331][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.218609][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.241964][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.264114][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.272019][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.284226][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.291806][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.299824][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.307838][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.315628][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.323029][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.331002][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.338733][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.346812][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.354509][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.361941][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.370535][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.378299][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.386027][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.393427][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.401541][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.409587][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.417356][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.425204][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.432630][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.440463][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.449723][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.457592][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.465348][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.473409][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.481239][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.488949][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.496701][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.514152][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.521552][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.543955][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.551383][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.574152][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.581946][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.604038][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.611703][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.638553][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.654054][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.661488][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.684041][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.691432][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.714008][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.721401][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.744828][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.752246][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.774060][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.781953][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.804048][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.811486][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.834094][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.841500][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.864006][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.871421][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.894070][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.901508][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.924055][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.931500][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.960324][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.968065][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2117.994155][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2118.001591][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2118.024008][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2118.031445][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2118.039282][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2118.046855][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2118.054659][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2118.062090][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2118.070088][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2118.077913][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2118.085660][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2118.093744][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2118.101586][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2118.109304][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2118.117080][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2118.126869][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2118.134653][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2118.142046][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2118.149983][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2118.157770][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2118.165634][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2118.173044][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2118.180949][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2118.188845][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2118.197458][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2118.205234][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2118.212669][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2118.220522][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2118.228627][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2118.236687][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2118.244584][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2118.251980][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2118.261558][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2118.269295][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2118.283317][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2118.304061][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2118.311502][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2118.334014][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2118.341413][ T3983] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 2118.370166][ T3983] hid-generic 0000:0000:0000.0065: hidraw0: HID v0.00 Device [syz0] on syz1 01:36:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000197100000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) [ 2118.381160][T19137] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:13 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0) 01:36:13 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000340)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0}}, 0x120) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x4) write$UHID_CREATE(r0, &(0x7f0000000480)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000180)=""/202, 0xca}}, 0x120) 01:36:13 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x0, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r2, 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x5, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x0, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r7, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000100)={"570349115ca64153b07d599b8bfbf1c61f64b414ed9b365ddc364693d755e8bd", r9}) 01:36:13 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000280)={0x60001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2118.515645][T19142] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2118.538591][T19142] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:36:13 executing program 1: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000340)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) [ 2118.580290][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2118.593393][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2118.610841][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 01:36:13 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x0, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r2, 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x5, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x5, "7086521a27711232c8057000"}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r7, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000100)={"570349115ca64153b07d599b8bfbf1c61f64b414ed9b365ddc364693d755e8bd", r8}) [ 2118.629134][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2118.646327][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2118.662672][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2118.679122][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2118.704080][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2118.711522][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2118.734009][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2118.741610][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2118.764074][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2118.771475][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2118.794093][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2118.801510][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2118.824036][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2118.831475][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2118.854020][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2118.861439][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2118.884064][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2118.891451][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2118.914059][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2118.921478][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2118.944141][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2118.951613][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2118.974036][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2118.981489][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2118.994398][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.001806][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.024516][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.031950][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.054028][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.061494][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.084094][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.091506][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.099217][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.107344][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.115630][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.123032][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.130563][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.138028][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.145686][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.153377][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.161022][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.168492][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.175990][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.183412][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.190932][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.198383][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.205899][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.214284][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.221699][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.229410][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.236934][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.244522][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.252239][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.259844][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.267389][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.274941][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.282380][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.289906][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.311999][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.320276][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.328225][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.335744][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.343142][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.350771][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.358681][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.366186][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.373613][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.381254][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.388773][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.396330][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.403727][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.411275][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.419442][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.427401][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.434957][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.442354][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.449987][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.457835][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.465542][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.472938][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.480488][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.487999][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.495529][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.502916][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.510626][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.518408][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.526680][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.534242][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.541634][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.549254][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.557335][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.565120][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.572595][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.580571][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.588180][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.595842][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.603312][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.610894][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.618456][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.626801][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.634435][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.641918][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.649553][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.657095][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.673976][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.688157][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.703479][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.711133][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.718711][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.726878][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.734442][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.741925][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.749873][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.757645][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.765625][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.773105][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.781010][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.788674][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.796690][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.804620][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.812129][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.819695][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.828273][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.835862][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.843477][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.851049][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.858766][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.866601][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.874324][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.881828][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.889544][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.897095][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.904933][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.912431][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.920630][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.928332][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.936756][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.944347][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.951989][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.959565][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.967612][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.975138][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.982793][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.990587][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2119.998247][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.005789][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.013439][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.021204][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.029078][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.050510][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.058485][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.066625][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.074700][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.082219][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.090919][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.098767][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.106607][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.114506][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.121989][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.129922][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.138346][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.146659][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.154420][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.161922][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.169766][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.177874][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.185655][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.193124][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.203442][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.211335][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.219114][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.227038][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.234832][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.242950][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.250830][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.258628][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.273200][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.280995][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.288953][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.299190][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.307658][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.315451][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.322931][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.330842][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.338849][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.347051][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.354816][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.362319][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.370222][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.378309][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.386214][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.393784][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.401784][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.409669][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.417555][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.425413][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.432996][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.440913][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 2120.449321][ T3983] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 01:36:15 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000340)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0}}, 0x120) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x4) write$UHID_CREATE(r0, &(0x7f0000000480)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000180)=""/202, 0xca}}, 0x120) [ 2120.498828][ T3983] hid-generic 0000:0000:0000.0066: hidraw0: HID v0.00 Device [syz0] on syz1 01:36:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000197200000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:15 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x0, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r2, 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x5, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x5, "7086521a27711232c8057000"}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r7, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000100)={"570349115ca64153b07d599b8bfbf1c61f64b414ed9b365ddc364693d755e8bd", r8}) [ 2120.558013][T19150] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2120.606623][T19155] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2120.634846][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2120.650722][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2120.669543][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2120.670346][T19164] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2120.699662][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 01:36:15 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) [ 2120.723268][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2120.745652][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2120.754170][T19164] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:36:15 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x0, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r2, 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x5, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x5, "7086521a27711232c8057000"}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r7, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000100)={"570349115ca64153b07d599b8bfbf1c61f64b414ed9b365ddc364693d755e8bd", r8}) [ 2120.776656][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2120.794785][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2120.816439][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 01:36:15 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x0, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r2, 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x5, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x5, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, 0x0) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000100)={"570349115ca64153b07d599b8bfbf1c61f64b414ed9b365ddc364693d755e8bd"}) [ 2120.834520][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2120.851953][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 01:36:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2120.880058][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2120.894172][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2120.901584][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 01:36:15 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x0, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r2, 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x5, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x5, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, 0x0) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000100)={"570349115ca64153b07d599b8bfbf1c61f64b414ed9b365ddc364693d755e8bd"}) [ 2120.923230][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2120.939064][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2120.958190][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2120.976493][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2120.994012][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.001415][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.024270][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.031697][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.054024][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.061705][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.084121][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.091548][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.114389][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.121819][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.144003][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.151419][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.159718][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.167399][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.175093][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.182582][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.190799][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.198538][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.215032][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.234062][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.241477][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.264105][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.271515][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.284798][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.292201][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.299939][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.307543][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.315153][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.322631][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.330241][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.337829][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.345483][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.352951][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.360629][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.368398][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.376037][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.383559][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.391171][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.398776][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.406413][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.414041][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.421571][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.444126][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.451533][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.459163][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.466805][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.474280][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.481677][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.489221][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.496787][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.504879][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.512511][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.520391][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.528237][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.543993][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.551599][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.559719][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.567585][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.575386][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.582941][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.591006][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.598833][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.606594][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.614501][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.622071][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.629916][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.637755][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.645583][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.653660][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.661861][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.669858][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.677717][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.685643][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.693253][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.701202][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.709062][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.717175][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.725022][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.732755][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.740658][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.748557][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.756404][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.764234][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.771970][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.780223][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.789405][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.797402][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.805316][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.812938][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.820823][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.828970][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.836841][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.844654][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.852292][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.860259][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.868082][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.876261][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.884211][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.891917][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.899835][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.908069][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.916091][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.923724][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.931636][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.939492][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.947288][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.955169][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.962790][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.970644][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.978792][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.986940][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2121.994874][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.002499][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.010371][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.018330][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.033166][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.041210][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.049189][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.057019][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.065043][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.072719][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.080949][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.088839][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.096687][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.104528][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.112169][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.120134][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.128047][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.142845][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.151044][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.159224][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.167115][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.175081][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.182821][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.190734][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.198593][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.206412][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.214290][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.221914][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.231875][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.239879][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.247816][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.255988][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.263611][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.271619][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.279521][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.287525][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.295430][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.303041][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.311131][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.319060][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.326920][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.334866][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.342488][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.350483][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.358391][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.366509][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.374439][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.382057][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.390198][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.398156][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.406063][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.413684][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.421707][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.429609][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.437510][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.445412][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.453030][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.461089][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.469138][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.477297][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.485192][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.492938][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.500990][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.508864][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.516850][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.524744][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.532362][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.540485][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.548481][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.558301][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.566210][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.574065][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.581692][ T3935] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 2122.594500][ T3935] hid-generic 0000:0000:0000.0067: hidraw0: HID v0.00 Device [syz0] on syz1 01:36:17 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000340)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0}}, 0x120) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x4) write$UHID_CREATE(r0, &(0x7f0000000480)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000180)=""/202, 0xca}}, 0x120) 01:36:17 executing program 1: pipe(&(0x7f0000000340)={0xffffffffffffffff}) fsetxattr(r0, &(0x7f00000000c0)=@known='system.posix_acl_access\x00', &(0x7f0000000100)='(\'@\x00', 0x4, 0x0) 01:36:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000197300000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:17 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x0, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r2, 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x5, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x5, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, 0x0) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000100)={"570349115ca64153b07d599b8bfbf1c61f64b414ed9b365ddc364693d755e8bd"}) [ 2122.679504][T19172] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2122.749628][T19174] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2122.772288][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2122.780958][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 01:36:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:17 executing program 1: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x22040, 0x0) preadv2(r0, &(0x7f0000000280)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 01:36:17 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) [ 2122.787730][ T25] audit: type=1400 audit(1644111377.597:27810): avc: denied { setattr } for pid=19184 comm="syz-executor.1" name="" dev="pipefs" ino=235225 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 2122.789171][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2122.811024][ C1] vkms_vblank_simulate: vblank timer overrun [ 2122.862663][T19190] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2122.872144][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 01:36:17 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x0, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r2, 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x5, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x5, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000100)={"570349115ca64153b07d599b8bfbf1c61f64b414ed9b365ddc364693d755e8bd", r8}) [ 2122.917384][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2122.928085][T19195] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2122.951615][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 01:36:17 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) ppoll(&(0x7f0000000200)=[{r0}], 0x1, 0x0, 0x0, 0x0) [ 2122.968828][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2122.997936][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 01:36:17 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x0, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r2, 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x5, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x5, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000100)={"570349115ca64153b07d599b8bfbf1c61f64b414ed9b365ddc364693d755e8bd", r8}) [ 2123.021118][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.045536][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.054796][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.063591][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 01:36:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0) 01:36:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2123.071969][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.079865][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.095981][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.118385][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.138424][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.159449][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.176833][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.185317][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.192801][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.201072][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.209516][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.218671][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.227106][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.234900][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.242374][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.250277][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.258041][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.266258][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.273728][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.295329][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.302735][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.329881][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.337796][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.345639][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.353028][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.360817][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.368546][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.376213][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.383603][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.391384][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.399384][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.407234][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.415291][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.422685][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.430528][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.438498][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.446240][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.453630][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.461506][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.469260][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.476948][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.484748][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.492138][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.499932][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.508401][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.516387][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.523784][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.531600][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.539322][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.547257][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.555007][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.562399][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.570257][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.577955][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.585657][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.593042][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.600882][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.608575][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.630690][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.638658][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.646607][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.655741][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.663133][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.671294][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.679091][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.686853][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.694595][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.701980][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.709905][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.717719][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.726006][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.733394][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.741185][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.748881][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.756625][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.764385][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.771779][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.779631][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.787448][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.795161][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.802548][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.810422][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.818213][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.826012][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.833402][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.841783][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.849469][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.857190][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.864872][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.872257][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.880300][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.888015][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.895727][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.903112][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.910949][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.918772][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.928508][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.936268][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.943653][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.951980][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.959709][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.967626][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.975363][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.982759][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2123.992628][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.000389][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.008067][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.015763][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.023150][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.031044][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.038761][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.046485][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.054298][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.061997][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.070627][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.078304][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.086012][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.093407][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.101146][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.108819][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.116443][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.124068][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.131707][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.139401][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.147774][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.155551][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.162943][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.170768][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.178425][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.186183][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.193579][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.201344][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.209016][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.216634][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.224557][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.232159][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.239949][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.247722][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.255576][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.263134][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.270981][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.284407][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.291898][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.299964][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.307811][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.317208][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.325038][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.332677][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.340629][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.348413][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.356197][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.363715][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.371652][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.379502][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.387371][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.395217][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.402735][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.410699][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.429552][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.437658][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.445490][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.452962][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.460899][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.468679][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.476500][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.484247][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.491728][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.499677][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.507456][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.515487][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.522966][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.530816][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.538710][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.546546][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.554293][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.561775][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.569616][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.577448][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.585220][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.592723][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.600611][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.608378][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.616162][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.623644][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.631603][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.639548][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.647476][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.655470][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.663071][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.671112][ T3674] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2124.689373][ T3674] hid-generic 0000:0000:0000.0068: hidraw0: HID v0.00 Device [syz0] on syz1 01:36:19 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000340)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/9, 0x9}}, 0x120) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f00000000c0), 0x4) write$UHID_CREATE(r0, &(0x7f0000000480)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000180)=""/202, 0xca}}, 0x120) 01:36:19 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x0, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r2, 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x5, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x5, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000100)={"570349115ca64153b07d599b8bfbf1c61f64b414ed9b365ddc364693d755e8bd", r8}) 01:36:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000197400000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:19 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) recvmmsg$unix(r0, &(0x7f0000007f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 2124.787776][T19199] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:19 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x0, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r2}) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000000)={0x5, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000040)={0x5, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r6, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000100)={"570349115ca64153b07d599b8bfbf1c61f64b414ed9b365ddc364693d755e8bd", r8}) 01:36:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2124.837859][T19202] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:19 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:19 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000340)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/9, 0x9}}, 0x120) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f00000000c0), 0x4) write$UHID_CREATE(r0, &(0x7f0000000480)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000180)=""/202, 0xca}}, 0x120) 01:36:19 executing program 1: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x22040, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000640), 0x0, 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000000), &(0x7f00000008c0)=ANY=[], 0xee, 0x0) 01:36:19 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x0, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r2}) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000000)={0x5, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000040)={0x5, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r6, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000100)={"570349115ca64153b07d599b8bfbf1c61f64b414ed9b365ddc364693d755e8bd", r8}) [ 2124.916769][T19221] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2124.963990][T19226] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:36:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x38}}, 0x0) 01:36:19 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x0, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r2}) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000000)={0x5, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000040)={0x5, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r6, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000100)={"570349115ca64153b07d599b8bfbf1c61f64b414ed9b365ddc364693d755e8bd", r8}) [ 2125.030489][ T3674] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 2125.056054][ T3674] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 2125.065186][ T3674] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 01:36:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2125.082449][ T3674] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 2125.099912][ T3674] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 2125.118403][ T3674] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 01:36:19 executing program 1: socket(0xa, 0x3, 0x81) [ 2125.138301][ T3674] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 2125.150708][T19236] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000197500000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:20 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x0, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r2, 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x5, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x5, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r7}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, 0x0) [ 2125.187253][ T3674] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 2125.207095][T19237] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2125.224207][ T3674] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 01:36:20 executing program 1: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2040, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x4) 01:36:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) [ 2125.246301][ T3674] hid-generic 0000:0000:0000.0069: hidraw0: HID v0.00 Device [syz1] on syz1 [ 2125.271758][T19252] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:20 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000340)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/9, 0x9}}, 0x120) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f00000000c0), 0x4) write$UHID_CREATE(r0, &(0x7f0000000480)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000180)=""/202, 0xca}}, 0x120) 01:36:20 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x0, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r2, 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x5, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x5, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r7}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, 0x0) [ 2125.339544][T19252] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:36:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000280)={0x60001}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:36:20 executing program 1: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2040, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x4) [ 2125.413229][ T3674] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 2125.432490][ T3674] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 2125.447490][T19258] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:20 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x0, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r2, 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x5, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x5, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r7}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, 0x0) 01:36:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000197600000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) [ 2125.467347][ T3674] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 2125.492644][ T3674] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 01:36:20 executing program 1: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2040, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x4) [ 2125.527415][ T3674] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 2125.550028][ T3674] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 2125.559166][T19270] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2125.566972][ T3674] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 01:36:20 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x0, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r2, 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x5, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x5, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r7}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000100)={"570349115ca64153b07d599b8bfbf1c61f64b414ed9b365ddc364693d755e8bd"}) [ 2125.591693][ T3674] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 2125.601128][ T3674] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 2125.631156][ T3674] hid-generic 0000:0000:0000.006A: hidraw0: HID v0.00 Device [syz1] on syz1 01:36:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000280)={0x60001}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:36:20 executing program 1: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2040, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x4) 01:36:20 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000340)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/9, 0x9}}, 0x120) write$UHID_DESTROY(r0, 0x0, 0x0) write$UHID_CREATE(r0, &(0x7f0000000480)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000180)=""/202, 0xca}}, 0x120) 01:36:20 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x0, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r2, 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x5, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x5, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r7}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000100)={"570349115ca64153b07d599b8bfbf1c61f64b414ed9b365ddc364693d755e8bd"}) 01:36:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000197700000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) [ 2125.797711][ T8441] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 2125.822524][ T8441] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 01:36:20 executing program 1: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x22040, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000000), &(0x7f0000000380)=@v2={0x0, 0x0, 0x0, 0x0, 0x3c, "47283da23d24a7e369af6292c9ee385a37492ba8b62290d1bb1bfa8343331706c3de9246f2b6b833cc2d2c3ba1d4e63c3e9203d325f609eb30e300e7"}, 0x45, 0x0) [ 2125.846627][ T8441] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 2125.854552][ T8441] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 2125.862836][ T8441] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 2125.872137][ T8441] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 2125.881468][ T8441] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 2125.889307][ T8441] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 2125.897141][ T8441] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 2125.915288][ T8441] hid-generic 0000:0000:0000.006B: hidraw0: HID v0.00 Device [syz1] on syz1 01:36:20 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000340)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/9, 0x9}}, 0x120) write$UHID_DESTROY(r0, 0x0, 0x0) write$UHID_CREATE(r0, &(0x7f0000000480)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000180)=""/202, 0xca}}, 0x120) 01:36:20 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x0, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r2, 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x5, "b7859a25bc3d0300000000000000003850b799c1770ef6d5ef4e3500", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x5, "7086521a27711232c8057000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000140)={"68876ade68609eb69f76049aed74ca86417f504df714effd8596b3c493f75bee", r7}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000100)={"570349115ca64153b07d599b8bfbf1c61f64b414ed9b365ddc364693d755e8bd"}) 01:36:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:20 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) recvmmsg$unix(r0, &(0x7f0000006a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 2125.960193][T19292] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000280)={0x60001}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 2126.073617][ T3935] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 2126.092956][ T3935] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 01:36:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000197800000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:20 executing program 4: clock_gettime(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4842, 0x0) [ 2126.123480][ T3935] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 2126.132138][ T3935] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 2126.155485][ T3935] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 01:36:21 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) [ 2126.183291][ T3935] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 2126.222820][ T3935] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 2126.224360][T19309] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:21 executing program 4: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2040, 0x0) ioctl$FIBMAP(r0, 0x1, 0x0) [ 2126.265269][ T3935] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 2126.282324][ T3935] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 2126.302127][ T3935] hid-generic 0000:0000:0000.006C: hidraw0: HID v0.00 Device [syz1] on syz1 01:36:21 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000340)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/9, 0x9}}, 0x120) write$UHID_DESTROY(r0, 0x0, 0x0) write$UHID_CREATE(r0, &(0x7f0000000480)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000180)=""/202, 0xca}}, 0x120) 01:36:21 executing program 5: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2040, 0x0) fadvise64(r0, 0xffffffffffffffff, 0x10001, 0x0) 01:36:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000197900000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:21 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) [ 2126.418450][T14023] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 2126.437808][T14023] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 01:36:21 executing program 5: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2040, 0x0) fsync(r0) fsetxattr$security_ima(r0, &(0x7f0000000000), &(0x7f0000000080)=@md5={0x1, "f1c25f39195fcfde5bf3989c020d39ef"}, 0x11, 0x2) 01:36:21 executing program 4: io_setup(0xb66, &(0x7f0000000000)) io_setup(0x2, &(0x7f0000002600)) [ 2126.461631][T14023] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 2126.496328][T14023] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 2126.514249][T14023] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 2126.520770][T19321] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2126.534597][T14023] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 2126.550923][T14023] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 2126.582798][T14023] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 2126.598685][T14023] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 2126.613302][T14023] hid-generic 0000:0000:0000.006D: hidraw0: HID v0.00 Device [syz1] on syz1 01:36:21 executing program 1: io_setup(0xb66, &(0x7f0000000000)=0x0) io_submit(r0, 0x0, 0x0) io_submit(r0, 0x0, 0x0) 01:36:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000197a00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:21 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000340)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/9, 0x9}}, 0x120) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x4) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000180)=""/202, 0xca}}, 0x120) 01:36:21 executing program 5: clock_gettime(0x0, &(0x7f0000006c80)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4842, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2040, 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) syncfs(r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) 01:36:21 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:21 executing program 4: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x1) [ 2126.975062][T19334] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2126.987518][ T3933] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 2127.003955][ T3933] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 2127.015007][ T3933] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 01:36:21 executing program 4: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2040, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) syncfs(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 01:36:21 executing program 5: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2040, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) [ 2127.026371][ T3933] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 2127.034909][ T3933] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 2127.043122][ T3933] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 2127.070797][ T3933] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 2127.094205][ T3933] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 2127.103094][ T3933] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 01:36:21 executing program 1: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x22040, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000640), &(0x7f0000000740)=@v3, 0x18, 0x0) 01:36:21 executing program 5: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) dup3(r2, r0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) dup3(r3, r1, 0x0) [ 2127.125890][ T3933] hid-generic 0000:0000:0000.006E: hidraw0: HID v0.00 Device [syz1] on syz1 01:36:22 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000340)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/9, 0x9}}, 0x120) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x4) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000180)=""/202, 0xca}}, 0x120) 01:36:22 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x6, 0x0}) 01:36:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000197b00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:22 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:22 executing program 5: clock_gettime(0x6, &(0x7f0000006c80)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4842, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2040, 0x2) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) syncfs(r0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000480)={0x3, 0x0, 0x2, 0x0, 0x0, [{{r0}, 0x6}, {}]}) 01:36:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x38}}, 0x0) 01:36:22 executing program 4: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2040, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)) [ 2127.316302][T19355] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2127.334806][ T8441] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 2127.342244][ T8441] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 2127.377884][ T8441] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 2127.394833][ T8441] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 2127.411819][ T8441] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 01:36:22 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080), 0xc, 0x0) 01:36:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000197c00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:22 executing program 4: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2040, 0x0) syncfs(r0) fsync(r0) 01:36:22 executing program 1: io_setup(0x8, &(0x7f0000000040)=0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) io_submit(r0, 0x1, &(0x7f0000001800)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x0, r3, 0x0, 0x0, 0x4}]) [ 2127.422439][ T8441] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 2127.440740][ T8441] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 2127.466557][ T8441] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 01:36:22 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) [ 2127.491265][ T8441] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 2127.536640][T19373] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2127.546902][ T8441] hid-generic 0000:0000:0000.006F: hidraw0: HID v0.00 Device [syz1] on syz1 01:36:22 executing program 5: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2040, 0x0) fadvise64(r0, 0x0, 0x10001, 0x0) 01:36:22 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000340)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/9, 0x9}}, 0x120) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x4) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000180)=""/202, 0xca}}, 0x120) 01:36:22 executing program 4: io_setup(0x8, &(0x7f0000000040)=0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) io_submit(r0, 0x1, &(0x7f0000001800)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x0, r3, 0x0}]) 01:36:22 executing program 1: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2040, 0x0) fsync(r0) 01:36:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000197d00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:22 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, &(0x7f0000000040), 0xd8, 0x0) [ 2127.696437][T19380] __nla_validate_parse: 21 callbacks suppressed [ 2127.696458][T19380] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:22 executing program 5: open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000400)='./file0/file0\x00', 0x0, 0x0) 01:36:22 executing program 4: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x22040, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) 01:36:22 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) [ 2127.743008][ T8441] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 2127.766138][T19387] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2127.781953][ T8441] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 01:36:22 executing program 5: io_setup(0x9, &(0x7f0000000000)=0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) io_submit(r0, 0x2, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}, 0x0]) [ 2127.818135][ T8441] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 01:36:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000197e00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:22 executing program 1: open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x2040, 0x0) [ 2127.874098][ T8441] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 2127.899796][ T8441] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 01:36:22 executing program 4: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x22040, 0x0) preadv2(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x2, 0x5, 0x0, 0x2) [ 2127.921169][ T8441] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 2127.921250][T19398] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2127.929306][ T8441] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 2127.962488][ T8441] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 2127.975949][ T8441] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 2128.009496][ T8441] hid-generic 0000:0000:0000.0070: hidraw0: HID v0.00 Device [syz1] on syz1 01:36:22 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000340)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/9, 0x9}}, 0x120) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x4) write$UHID_CREATE(r0, 0x0, 0x0) 01:36:22 executing program 5: pipe(0xffffffffffffffff) 01:36:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x2c}}, 0x0) 01:36:22 executing program 4: pselect6(0x0, 0xfffffffffffffffd, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0) 01:36:22 executing program 5: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x42040, 0x0) r1 = dup(r0) fadvise64(r1, 0x0, 0x0, 0x3) [ 2128.070843][T19400] validate_nla: 1 callbacks suppressed [ 2128.070862][T19400] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2128.106552][T19402] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:23 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) [ 2128.129050][T19406] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2128.141378][ T5454] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 2128.161406][ T5454] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 01:36:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000198200000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:23 executing program 4: pipe(&(0x7f0000000340)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) fsetxattr$security_ima(r2, &(0x7f0000000000), 0x0, 0xfffffffffffffef1, 0x0) 01:36:23 executing program 1: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2040, 0x0) syncfs(r0) [ 2128.217988][ T5454] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 01:36:23 executing program 5: io_setup(0xb66, &(0x7f0000000000)=0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000004500)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0}]) 01:36:23 executing program 4: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000340)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) dup3(r2, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) [ 2128.272382][ T5454] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 2128.273886][T19422] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2128.305618][ T5454] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 01:36:23 executing program 1: clock_gettime(0xc166c086429d64ee, 0x0) [ 2128.336705][ T5454] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 2128.358924][ T5454] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 2128.376288][T19426] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2128.392701][ T5454] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 2128.402110][T19428] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2128.409894][ T5454] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 2128.419377][T19432] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2128.442599][ T5454] hid-generic 0000:0000:0000.0071: hidraw0: HID v0.00 Device [syz1] on syz1 01:36:23 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000340)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/9, 0x9}}, 0x120) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x4) write$UHID_CREATE(r0, 0x0, 0x0) 01:36:23 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) write$binfmt_aout(r0, &(0x7f0000002380)={{}, "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"}, 0x1001) 01:36:23 executing program 1: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2040, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000000), &(0x7f0000000100)=ANY=[], 0xb, 0x2) 01:36:23 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 01:36:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000198300000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:23 executing program 1: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x22040, 0x0) preadv2(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/72, 0x48}, {0x0}], 0x2, 0x0, 0x0, 0x2) [ 2128.592769][ T3935] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 2128.611250][ T3935] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 2128.630390][T19444] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:23 executing program 1: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x22040, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) [ 2128.631276][ T3935] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 01:36:23 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) recvmmsg$unix(r0, &(0x7f0000000940)=[{{&(0x7f0000000000)=@abs, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/80}], 0x0, &(0x7f0000000140)=[@cred, @cred]}}, {{&(0x7f0000000180)=@abs, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/109}, {&(0x7f0000000280)=""/45}], 0x0, &(0x7f0000000300)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}]}}, {{&(0x7f0000000340), 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/20}, {&(0x7f0000000400)=""/86}, {&(0x7f0000000480)=""/136}]}}, {{&(0x7f0000000580), 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/129}, {&(0x7f00000006c0)=""/152}, {&(0x7f0000000780)=""/103}], 0x0, &(0x7f0000000840)=[@rights, @cred, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}]}}], 0x15, 0x40010040, 0x0) [ 2128.681913][ T3935] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 2128.695568][T19443] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2128.699387][ T3935] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 2128.712349][T19450] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:23 executing program 1: setuid(0xee01) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 2128.735987][ T3935] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 2128.753078][ T3935] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 2128.770172][ T3935] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 2128.789046][ T3935] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 2128.823131][ T3935] hid-generic 0000:0000:0000.0072: hidraw0: HID v0.00 Device [syz1] on syz1 01:36:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000198400000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:26 executing program 4: clock_gettime(0x6, &(0x7f0000006c80)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2040, 0x2) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000240)) syncfs(r0) dup(0xffffffffffffffff) pipe(&(0x7f0000000340)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) 01:36:26 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:26 executing program 1: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000340)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) dup3(r2, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x5, 0xa) 01:36:26 executing program 5: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x22040, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0x0, 0x0) 01:36:26 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000340)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/9, 0x9}}, 0x120) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x4) write$UHID_CREATE(r0, 0x0, 0x0) 01:36:26 executing program 1: io_setup(0x2, &(0x7f0000002600)=0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000002700), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000039c0)=[&(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) 01:36:26 executing program 5: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2040, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000100)) [ 2131.404687][T14023] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 [ 2131.406508][T19466] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2131.412145][T14023] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 01:36:26 executing program 4: clock_gettime(0x6, &(0x7f0000006c80)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2040, 0x2) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000240)) syncfs(r0) dup(0xffffffffffffffff) pipe(&(0x7f0000000340)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) [ 2131.469942][T14023] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 [ 2131.496795][T14023] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 01:36:26 executing program 5: clock_gettime(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2040, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) syncfs(r0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) [ 2131.521848][T14023] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 [ 2131.540946][T14023] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 [ 2131.560969][T14023] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 01:36:26 executing program 1: r0 = socket(0x2, 0x1, 0x0) fcntl$setown(r0, 0x6, 0xffffffffffffffff) 01:36:26 executing program 4: clock_gettime(0x6, &(0x7f0000006c80)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2040, 0x2) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000240)) syncfs(r0) dup(0xffffffffffffffff) pipe(&(0x7f0000000340)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) [ 2131.586509][T14023] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 [ 2131.602993][T14023] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 [ 2131.635369][T14023] hid-generic 0000:0000:0000.0073: hidraw0: HID v0.00 Device [syz1] on syz1 01:36:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000198500000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:26 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000340)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/9, 0x9}}, 0x120) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x4) write$UHID_CREATE(r0, &(0x7f0000000480)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x0}}, 0x120) 01:36:26 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) [ 2131.719876][ T25] audit: type=1400 audit(1644111386.527:27811): avc: denied { lock } for pid=19480 comm="syz-executor.1" path="socket:[236476]" dev="sockfs" ino=236476 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 01:36:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000000)=""/242, &(0x7f0000000100)=0xf2) 01:36:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendfile(r0, r1, 0x0, 0x800000080004103) 01:36:26 executing program 4: clock_gettime(0x6, &(0x7f0000006c80)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2040, 0x2) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000240)) syncfs(r0) dup(0xffffffffffffffff) pipe(&(0x7f0000000340)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) 01:36:26 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x78) link(0x0, 0x0) [ 2131.815523][T14023] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 2131.822376][T19490] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2131.822943][T14023] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 2131.822974][T14023] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 2131.823001][T14023] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 01:36:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000198600000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendfile(r0, r1, 0x0, 0x800000080004103) [ 2131.932434][T14023] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 2131.959672][T14023] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 2131.987430][T14023] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 2132.011996][T14023] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 01:36:26 executing program 4: pipe(&(0x7f0000002800)={0xffffffffffffffff}) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000980)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x4, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 01:36:26 executing program 1: syz_open_dev$vcsu(&(0x7f00000001c0), 0x7f, 0x46002) [ 2132.036084][T14023] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 2132.070479][T19504] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:26 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) [ 2132.097488][T14023] hid-generic 0000:0000:0000.0074: hidraw0: HID v0.00 Device [syz1] on syz1 01:36:26 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000340)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/9, 0x9}}, 0x120) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x4) write$UHID_CREATE(r0, &(0x7f0000000480)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x0}}, 0x120) 01:36:27 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendfile(r0, r1, 0x0, 0x800000080004103) 01:36:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_linger(r0, 0xffff, 0x80, 0x0, 0x0) 01:36:27 executing program 4: setreuid(0xee01, 0xee00) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) 01:36:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000198700000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:27 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) [ 2132.287115][ T3933] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 2132.304303][ T3933] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 01:36:27 executing program 4: capget(&(0x7f0000000100)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000140)) 01:36:27 executing program 1: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x2, &(0x7f0000002440)=[{&(0x7f0000001240)="f3", 0x1, 0x80000001}, {&(0x7f0000002240)='h', 0x1, 0x7fffffff}], 0x0, 0x0) [ 2132.328464][T19523] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2132.338108][ T3933] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 2132.355929][ T3933] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 01:36:27 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendfile(r0, r1, 0x0, 0x800000080004103) [ 2132.393695][ T3933] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 2132.413074][ T3933] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 2132.432392][ T3933] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 01:36:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 01:36:27 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=none,uname=}@,noextend,cache=none,afid=0x0000000000000579,version=9p2000']) [ 2132.447943][ T3933] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 2132.470164][ T3933] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 01:36:27 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x1) [ 2132.504549][ T3933] hid-generic 0000:0000:0000.0075: hidraw0: HID v0.00 Device [syz1] on syz1 01:36:27 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000340)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/9, 0x9}}, 0x120) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x4) write$UHID_CREATE(r0, &(0x7f0000000480)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x0}}, 0x120) 01:36:27 executing program 1: faccessat(0xffffffffffffffff, 0x0, 0x0) 01:36:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 01:36:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000198800000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:27 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:27 executing program 5: mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0) 01:36:27 executing program 1: shmget(0x2, 0x2000, 0x40, &(0x7f0000ffe000/0x2000)=nil) r0 = msgget(0x3, 0x47) msgctl$IPC_RMID(r0, 0x0) msgget$private(0x0, 0x188) [ 2132.649663][T14023] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 2132.677505][T14023] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 2132.708671][T19546] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2132.744957][T14023] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 01:36:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 01:36:27 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000100)=""/245, 0xf5}, {&(0x7f0000000240)=""/108, 0x6c}], 0x2, 0x0, 0x0) 01:36:27 executing program 1: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) [ 2132.752479][T14023] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 2132.778152][T19554] __nla_validate_parse: 12 callbacks suppressed [ 2132.778171][T19554] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2132.784063][T14023] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 2132.822697][T14023] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 2132.840919][T14023] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 2132.856482][T14023] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 2132.868676][T19555] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000198900000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:27 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) fcntl$dupfd(r0, 0xa, r0) [ 2132.910536][T14023] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 2132.978634][T14023] hid-generic 0000:0000:0000.0076: hidraw0: HID v0.00 Device [syz1] on syz1 [ 2132.988362][T19566] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 01:36:27 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:27 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000080)={@broadcast, @remote, @val, {@ipv4}}, 0x0) 01:36:27 executing program 5: mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) [ 2133.049971][T19570] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:36:27 executing program 1: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munmap(&(0x7f0000ff6000/0x8000)=nil, 0x8000) 01:36:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000440)="eb22c1a9141383570dd70043353f1c3148b4cee86a00f292b5711a928b4edb95f787468d4643218867dbc5d16ac0b93825678adddb6a767883e07d14f1b41353ad09ac0c4ee461c6898887f2df435574ac9b087656eaee89dc67cc7292de303e9ec561292acc77613555e17b7c1bb01f99f0197538c0707af6488938a374b9425725198634ec1fde0bee6ed3aad3d310e8", 0x91, 0x0, 0x0, 0x0) 01:36:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000198a00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:28 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001640)={&(0x7f0000000040)=@in6, 0xc, 0x0}, 0x0) [ 2133.176289][T19573] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:28 executing program 3: munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) munmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000) 01:36:28 executing program 4: faccessat(0xffffffffffffffff, 0x0, 0x8f) 01:36:28 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:28 executing program 3: r0 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000040), 0x4) 01:36:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r0, 0x0, 0x0, 0x0, 0x0) [ 2133.291664][T19589] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2133.323745][T19589] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:36:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r0, 0x0, 0x0) 01:36:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000198b00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) [ 2133.410532][T19593] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:28 executing program 1: mlock(&(0x7f0000fee000/0x12000)=nil, 0x12000) madvise(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x4) 01:36:28 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001d40)) 01:36:28 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:28 executing program 4: mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) [ 2133.519986][T19603] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2133.556525][T19603] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2133.608552][T19608] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:28 executing program 5: mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:36:28 executing program 3: r0 = socket$inet6(0x18, 0x3, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/187, 0xbb}], 0x1) 01:36:28 executing program 1: symlinkat(&(0x7f0000000200)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00') rename(&(0x7f0000000040)='./file0\x00', 0x0) 01:36:28 executing program 4: mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 01:36:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000198c00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:28 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:29 executing program 4: r0 = getpid() setpgid(r0, r0) 01:36:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) [ 2134.135611][T19617] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2134.158761][T19620] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:29 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000540)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000480)}, 0x0) 01:36:29 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) [ 2134.201715][T19617] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:36:29 executing program 5: r0 = socket(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1006, 0x0, 0x0) 01:36:29 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="2ad92b31f59fbcd7f4f916f6295744b02bf9237d94bab8f828db77f965fd1970c997e524df66e2617e84abab33eeda", 0x2f}, {&(0x7f00000000c0)="450bc5bcae6b6e4ee243ffc0548901f49645dc4ff99feeb475730508559840b78a48d5a4e26276758c246e4ef35d37ee574ba3f6bd334209b13f90be2d134836e6b732d28616bd0fa3b22eb9f845c7d4ea7598afa8f69bafe315cbe927928ea2cd52", 0x62}, {0x0}, {&(0x7f0000000240)="1d", 0x1}], 0x4}, 0x0) 01:36:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000198d00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:29 executing program 3: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') shmctl$IPC_SET(0x0, 0x13, 0x0) 01:36:29 executing program 1: sendmsg$unix(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000000), 0x107b}, 0x0) 01:36:29 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000440)="eb22c1a9141383570dd70043353f1c3148b4cee86a00f292b5711a928b4edb95f787468d4643218867dbc5d16ac0b93825678adddb6a767883e07d14f1b41353ad09ac0c4ee461c6898887f2df435574ac9b087656eaee89dc67cc7292de303e9ec561292acc77613555e17b7c1bb01f99f0197538c0707af6488938a374b9425725198634ec1fde0bee6ed3aad3d310e8", 0x91, 0x0, 0x0, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:36:29 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:29 executing program 5: socketpair(0x0, 0x0, 0x7, 0x0) 01:36:29 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) connect$inet(r0, 0x0, 0x0) [ 2134.416105][T19639] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:29 executing program 4: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6) 01:36:29 executing program 1: readv(0xffffffffffffffff, &(0x7f0000000700)=[{0x0}, {0x0, 0xadbeafde00000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) 01:36:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000198e00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:29 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights], 0x10}, 0x0) 01:36:29 executing program 3: socketpair(0x18, 0x0, 0x7, 0x0) 01:36:29 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:29 executing program 1: madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5) [ 2134.594768][T19653] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:29 executing program 4: shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x1000)=nil, 0x0) 01:36:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001a40)={0x0, 0x0, 0x0}, 0x0) recvfrom$unix(r0, &(0x7f00000000c0)=""/116, 0x74, 0x840, 0x0, 0x0) 01:36:29 executing program 3: r0 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x800, &(0x7f0000000000), 0x4) 01:36:29 executing program 1: openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 01:36:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000198f00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:29 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:29 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x12, r0, 0x0) 01:36:29 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x10, &(0x7f0000000080)=0x1ff, 0x4) 01:36:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x4, 0x0, 0x0) [ 2134.841734][T19676] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:29 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:29 executing program 3: mkdir(0x0, 0x0) sync() renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:36:29 executing program 5: geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, 0x0, &(0x7f00000003c0)) setsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, 0x0, 0x0) pipe(&(0x7f0000000440)) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 01:36:29 executing program 4: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) 01:36:29 executing program 1: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) 01:36:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000199000000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:29 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:29 executing program 5: r0 = semget(0x0, 0x1, 0x200) semctl$IPC_RMID(r0, 0x0, 0x0) 01:36:29 executing program 4: socket(0x1, 0x3, 0x8) 01:36:29 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="ab", 0x1}], 0x1}, 0x0) [ 2135.058999][T19695] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:29 executing program 1: pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getdents(r0, 0x0, 0x0) 01:36:29 executing program 5: syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @empty, @val, {@ipv4}}, 0x0) 01:36:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) 01:36:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000199100000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:30 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:30 executing program 3: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/219) 01:36:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="2ad92b31f59fbcd7f4f916f6295744b02bf9237d94bab8f828db77f965fd1970c997e524df66e2617e84abab33eeda", 0x2f}, {&(0x7f00000000c0)="450bc5bcae6b6e4ee243ffc0548901f49645dc4ff99feeb475730508559840b78a48d5a4e26276758c246e4ef35d37ee574ba3f6bd334209b13f90be2d134836e6b732d28616bd0fa3b22eb9f845c7d4ea7598afa8f69bafe315cbe927928ea2cd522581f2d269071eb3", 0x6a}, {&(0x7f0000000140)="fae439635da2015c71eaa53ee77bd38b08c6a31febf629f59d8ec989e54795d161de07daf25ac94cff1ab3e505766130510314e96bae213a0b9c7d0bfd8c0acabcbabf7337c5f16b387a88917372fb678c3e0ed702f396ad4b5a3b3a8b1bc8b0cf37f8da7423f7b8e5d7a4304d5883bb842810eda46fab6034284185390fe89debff6c9181ee1048441fe9e0caef12f21d6b7cf573156e5ebb0064d091121a713b302dafe5555b8ff0d4ed4590c1aa6f8e4cc34c9f118cd1e8ac69be28cb3dc6ef1a4c", 0xc3}, {&(0x7f0000000240)="1db39692cbc314e6e1cc2a93199b563589d9e27093", 0x15}], 0x4}, 0x401) 01:36:30 executing program 5: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) readv(r0, &(0x7f00000000c0)=[{0x0}], 0x1) 01:36:30 executing program 4: setitimer(0x1, &(0x7f0000000080)={{}, {0x0, 0x1ff}}, 0x0) [ 2135.266014][T19710] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:30 executing program 3: setitimer(0x0, &(0x7f00000000c0)={{}, {0x10005}}, 0x0) setitimer(0x0, &(0x7f0000000000), 0x0) 01:36:30 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:30 executing program 5: readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}, {0x0}, {0x0}], 0x3) 01:36:30 executing program 1: syz_emit_ethernet(0x66, &(0x7f00000003c0)={@local, @remote, @val, {@ipv6}}, 0x0) 01:36:30 executing program 3: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2) 01:36:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000199200000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:30 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1003, &(0x7f0000000080), 0x0) 01:36:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, &(0x7f00000011c0)='b', 0x1, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) 01:36:30 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, &(0x7f0000001780)) 01:36:30 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) [ 2135.532663][T19734] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:30 executing program 4: mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:36:30 executing program 3: sendmsg$unix(0xffffffffffffffff, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x0) 01:36:30 executing program 5: r0 = socket(0x2, 0xc003, 0x0) close(r0) r1 = socket(0x2, 0xc003, 0x2f) setsockopt(r1, 0x0, 0x22, &(0x7f0000000000)="caf5b415", 0x4) connect$unix(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="82022ede68"], 0x10) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000040)="8546d7a2c3c16689d51fce8c22e544ec3c2e453b2736e57b3bc37ffc181770637cf37c5a0de9d517372605c72e7d4e2aeb077d318f6423d80ea80e82aaf6391d4f1820d2023cb25a805b9cac8eeaf5e5c0d65eebe6eb767d9620a9490a409e52b8606f008db615b326b052829aff668f4ee1786c86564cbfa945019764e58bc8bde941a38043f7a17006a1548854aab6a424389c111811fa4a2aa23b4b0beeb564efafa7958776be6bf010c13fc4aa67ec198c787a18"}, {&(0x7f0000000100)="af1e72a8c4c5e19d36346279ff690a0775835e7470e7a41aa7f3bad6df51aca8909fcec60326336864cf631d67e6f487ecf083723dfdf377c8eeaf1221deea1e0012fae469cb423134628c2034e96e62d427a9eb06a02fc8d3935735ae85e8f377f981ab412c03d48d1d21aca59bbde3fc3496b3ef67a515c243e6365e25f2533984233af7e78a74eae8a41975fdac74630e6231da5b6a04ccf96b2c2c7998b7b672a8207120624f2effb198b7a253c8e6048a83240b3e9b566592c6ccb7ccabc3c2f64ca5520cf6aa5d10b519911b9da8aa9b37bd7af5a88e679e23507d85ecda3a738565838239e1344a95e65c6b07b48b00b4"}, {&(0x7f0000000200)="ac0f985ca80993e21354dadba1f8e7968cd07d9a815a17512ad4200d20faa2a5fb4002f929a37d75e7d69004425690034ab05cc2"}, {&(0x7f0000000240)="50b559159637c6637e322677baae265ac037f82cb39a51dcc2c558334f52f59d89b2ddb5769440f4c5f7d811e80c28f7bb6f168739aa2bfe1344a1aa135852f48e6683f4e1c14b971ab94bffa1edac6e0b751f4a903dd396f6f4555f354d7b8c9b8abba0d675b63b17f4191bd151dd05c1673b90aba68d90e1b1dc6fbc2d92b64fb78543958e645e5c90946a26e77e33de1648e21ca2f487873118b1737c9ce4eef3b08af0739bd03d1373dced74d9f1a0c4ac2a"}], 0x100000000000012a) 01:36:30 executing program 1: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 01:36:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000199300000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:30 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:30 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001640)={&(0x7f0000000040)=@in6, 0xc, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {0x0}, {0x0, 0xfd34}], 0x26, &(0x7f00000000c0)=""/113, 0x6f}, 0x0) sendmsg$unix(r1, &(0x7f0000001a40)={0x0, 0x0, 0x0}, 0x0) 01:36:30 executing program 4: syz_emit_ethernet(0x23, &(0x7f0000000000)={@local, @empty, @val, {@ipv4}}, 0x0) 01:36:30 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x10081, 0x0) getdents(r0, 0x0, 0x0) 01:36:30 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000008c0)={&(0x7f00000004c0)=@abs, 0x8, &(0x7f0000000840)=[{&(0x7f0000000500)="cf7be625b5465262a555f419b2dd8b1f3b132a62bb0e93025497336e502220263092ddc3ee6dcb6c9cabde1be46302cbd3121c84cb553e4de70eac221f91a2dbc0116dd3d50bc5b88cc0b25f952319568fdcd830a15d779eb75abc5f8632c87b9ad245467427198bdd1007a86d857e15a76409d208dcaac78c3f4a3d945c564ca582972df54db9ab0e1a3301c3ec0e71dfb3d2d10b49a77f", 0x98}, {&(0x7f00000005c0)="05002aa0008f0a3557cace53c08039a93739bf0ef1ce31f85340a5a36f76a6dc5608b46cae7143e4b5a67f96e5379d00fa8719f8f21285fdca7f6603a2799b8c73a0de29eb4eff744f8dbc5bbd3ad140dab65f5b4b22e507a6b173642ca874d770bddaea4beb8741f3efdabd2e437827ed4bc9692136474f440a59e998f1212f8ee4e2cc2bcbc8d3dff2a55dba616fada02200480fcaaf8aace9a19aa65c0f214f3cf62b4976d1fa9182da473321a647270ef525228aa383cf3bd2a749c981879939d5bd8307e3ce63705d201a655e7cea7ee4d66622abc40e", 0xd9}, {0x0}], 0x3, &(0x7f0000000880)=[@cred], 0x20}, 0x40b) [ 2135.772726][T19756] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:30 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/116, 0x74}, 0x2) sendmsg$unix(r1, &(0x7f0000001a40)={0x0, 0x0, 0x0}, 0x0) 01:36:30 executing program 3: socket(0x6, 0x0, 0x1) 01:36:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000199400000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:30 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x2, 0x1, 0x0) dup2(r1, r0) syz_open_pts(0xffffffffffffffff, 0x0) 01:36:30 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:30 executing program 5: r0 = socket(0x18, 0x3, 0x0) connect(r0, &(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0xa) 01:36:30 executing program 3: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}}) mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0) 01:36:30 executing program 1: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 01:36:30 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:30 executing program 4: socketpair(0x2, 0x3, 0xc6, 0x0) 01:36:30 executing program 5: r0 = socket$inet6(0x18, 0x3, 0x0) bind$inet6(r0, &(0x7f0000000000)={0x18, 0x3}, 0xc) 01:36:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000199500000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:30 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) shutdown(r0, 0x1) 01:36:30 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) 01:36:31 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:31 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x612, 0x0) 01:36:31 executing program 5: semctl$SETALL(0x0, 0x0, 0x9, &(0x7f0000000000)) semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)) 01:36:31 executing program 3: pipe(&(0x7f0000000440)={0xffffffffffffffff}) setsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) 01:36:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000199600000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:31 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x2010, r0, 0x0) 01:36:31 executing program 4: setitimer(0x0, &(0x7f0000000040)={{}, {0x0, 0xfffffffffffffff8}}, 0x0) 01:36:31 executing program 5: setitimer(0x0, &(0x7f0000000000)={{}, {0x2000000002}}, 0x0) 01:36:31 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:31 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) close(r0) 01:36:31 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff}) write(r0, 0x0, 0x0) 01:36:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000199700000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:31 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:31 executing program 1: mlock(&(0x7f0000ff8000/0x7000)=nil, 0x7000) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) 01:36:31 executing program 4: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, 0x0, 0x0) 01:36:31 executing program 3: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 01:36:31 executing program 5: setitimer(0x0, &(0x7f0000000140)={{}, {0xffffffff, 0x683}}, 0x0) 01:36:31 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) shutdown(r0, 0x1) recvfrom(r0, 0x0, 0x0, 0x801, 0x0, 0x0) 01:36:31 executing program 3: madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 01:36:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000199800000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:31 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000001400), 0x20000, 0x0) 01:36:31 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) sendto$unix(r1, &(0x7f0000000080)="934098a033bb50f6a90d327e08a705100ac24b410cf2f84114ad25155d0c0f5488c8713fd7c4789872843f7c9c59bb8bcf8a459c87d50ab90453909b944d13b72f73e291502836b61c232040195ea4be38d96b22ffdc50d6a4c36b2f8218c9dbed040d84c11d19423da1dac57e98415205dcae456bd7533fb6d0a826d6150780b00992392e63a0a714e380c6df800016c2", 0x91, 0xa, 0x0, 0x0) 01:36:31 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1}, 0x42) sendmsg$unix(r1, &(0x7f0000001a40)={0x0, 0x0, 0x0}, 0x0) 01:36:31 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)}, 0x0) 01:36:31 executing program 1: r0 = socket(0x18, 0x3, 0x0) sendmsg$unix(r0, &(0x7f00000005c0)={&(0x7f00000001c0)=@abs, 0x8, 0x0}, 0x0) 01:36:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000199900000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:31 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x0) utimes(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)) 01:36:31 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1}, 0x42) sendmsg$unix(r1, &(0x7f0000001a40)={0x0, 0x0, 0x0}, 0x0) 01:36:31 executing program 4: pipe(&(0x7f0000000440)={0xffffffffffffffff}) getpeername$inet(r0, 0x0, 0x0) 01:36:31 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:31 executing program 1: madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 01:36:31 executing program 4: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) 01:36:31 executing program 1: madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 01:36:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000199a00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:31 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000440)="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", 0x171, 0x0, 0x0, 0x0) 01:36:31 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1}, 0x42) sendmsg$unix(r1, &(0x7f0000001a40)={0x0, 0x0, 0x0}, 0x0) 01:36:32 executing program 4: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 01:36:32 executing program 3: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 01:36:32 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:32 executing program 1: madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 01:36:32 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1}, 0x42) sendmsg$unix(r1, &(0x7f0000001a40)={0x0, 0x0, 0x0}, 0x0) 01:36:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000199b00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:32 executing program 3: mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 01:36:32 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSWINSZ(r0, 0x80087467, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) 01:36:32 executing program 1: madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 01:36:32 executing program 5: setsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, 0x0, 0x0) 01:36:32 executing program 3: utimensat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={{0x0, 0x45c2795c}}, 0x0) 01:36:32 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getdents(r0, 0x0, 0x0) 01:36:32 executing program 3: r0 = socket(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1, 0x0, 0x0) 01:36:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000199c00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:32 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:32 executing program 5: madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) 01:36:32 executing program 1: r0 = socket(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x4, 0x0, 0x0) 01:36:32 executing program 5: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fchownat(r0, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x0, 0x0) 01:36:32 executing program 3: syz_emit_ethernet(0x4df, &(0x7f00000003c0)={@local, @remote, @val, {@ipv6}}, 0x0) 01:36:32 executing program 4: r0 = socket(0x18, 0x3, 0x0) sendmsg$unix(r0, &(0x7f00000005c0)={&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0xa, 0x0}, 0x1) 01:36:32 executing program 1: accept$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xc) 01:36:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000199d00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:32 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:32 executing program 3: semctl$SETVAL(0x0, 0x0, 0x8, &(0x7f0000000000)) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) 01:36:32 executing program 5: pipe(&(0x7f0000000940)) 01:36:32 executing program 1: r0 = socket(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, 0x0, 0x0) 01:36:32 executing program 4: r0 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x4, &(0x7f0000000000), 0x4) 01:36:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000199e00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) [ 2137.817609][T19929] __nla_validate_parse: 51 callbacks suppressed [ 2137.817630][T19929] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:32 executing program 1: utimes(0x0, &(0x7f0000000040)={{0x0, 0x4000000000}}) 01:36:32 executing program 3: semctl$GETPID(0xffffffffffffffff, 0x0, 0x4, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000002100)=""/239) 01:36:32 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000440)="eb22c1a9141383570dd70043353f1c3148b4cee86a00f292b5711a928b4edb95f787468d4643218867dbc5d16ac0b93825678adddb6a767883e07d14f1b41353ad09ac0c4ee461c6898887f2df435574ac9b087656eaee89dc67cc7292de303e9ec561292acc77613555e17b7c1bb01f99f0197538c0707af6488938a374b9425725198634ec1fde0bee6ed3aad3d310e8", 0x91, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000080)='7', 0x1, 0x0, 0x0, 0x0) [ 2137.865564][T19939] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:32 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) [ 2137.914774][T19942] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:36:32 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000028c0)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0xa, 0x0}, 0x0) 01:36:32 executing program 5: readv(0xffffffffffffffff, &(0x7f0000000700)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xfffffffe) 01:36:32 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000199f00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:32 executing program 1: syz_emit_ethernet(0x2b, &(0x7f0000000000)={@local, @empty, @val, {@ipv4}}, 0x0) 01:36:32 executing program 4: syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @empty, @val, {@ipv4}}, 0x0) 01:36:32 executing program 3: mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0xa1ada3dd639c59be, 0xffffffffffffffff, 0x0) 01:36:32 executing program 5: r0 = socket(0x2, 0x1, 0x0) fcntl$dupfd(r0, 0x85404f6d9b35a96d, 0xffffffffffffffff) 01:36:32 executing program 1: fchmodat(0xffffffffffffffff, 0x0, 0x0) [ 2138.118881][T19956] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:36:33 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, 0x0) syz_init_net_socket$ax25(0x3, 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000a80)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3f}, @kfunc], &(0x7f0000000b00)='GPL\x00', 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x2}, 0x8, 0x10, 0x0}, 0x80) 01:36:33 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000140)={0x0, 0x0, 0x1800}, 0x20) 01:36:33 executing program 5: pipe(0x0) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000840), 0xffffffffffffffff) [ 2138.225883][T19960] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:33 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b04, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254}, {&(0x7f00000014c0)=""/138}, {&(0x7f0000000400)=""/156}, {&(0x7f00000004c0)=""/4096}], 0x0, &(0x7f00000002c0)=""/204, 0xfffffffffffffdf4}}], 0x1500, 0x42, 0x0) 01:36:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019a000000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) [ 2138.266912][T19965] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2138.344252][T19980] validate_nla: 12 callbacks suppressed [ 2138.344271][T19980] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:33 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:33 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000a80)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3f}], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:36:33 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040), 0x4) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x40800) sendmsg$AUDIT_LIST_RULES(r0, 0x0, 0x2000c840) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, 0x0, 0x5) sendmsg$FOU_CMD_ADD(r1, 0x0, 0x402c815) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000700)={&(0x7f00000006c0)='./file0\x00'}, 0x10) syz_init_net_socket$ax25(0x3, 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000007c0), 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000000840), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000a80)=@raw=[@alu, @kfunc], &(0x7f0000000b00)='GPL\x00', 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:36:33 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 2138.409508][T19982] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:36:33 executing program 4: pipe(&(0x7f0000000000)) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x10) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) pipe(&(0x7f0000000180)) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) 01:36:33 executing program 3: syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) 01:36:33 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000700)={&(0x7f00000006c0)='./file0\x00'}, 0x10) syz_init_net_socket$ax25(0x3, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000840), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f00000009c0)={&(0x7f0000000980)='./file0\x00'}, 0x10) 01:36:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019a100000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) [ 2138.533016][T19990] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x30}}, 0x0) [ 2138.595273][T19997] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:33 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8914, &(0x7f0000000080)={'sit0\x00', 0x0}) 01:36:33 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b04, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254}, {&(0x7f00000014c0)=""/138}, {&(0x7f0000000400)=""/156}, {&(0x7f00000004c0)=""/4096}], 0x0, &(0x7f00000002c0)=""/204, 0xfffffffffffffdf4}}], 0x1500, 0x42, 0x0) 01:36:33 executing program 5: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) connect(r0, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10) [ 2138.650972][T20000] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:33 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:33 executing program 3: socketpair(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={0x0}}, 0x0) [ 2138.722924][T20000] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:36:33 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x41) 01:36:33 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x10) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000140), 0x4) pipe(&(0x7f0000000180)) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x200, 0x0, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5}, @FOU_ATTR_AF={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000700)={&(0x7f00000006c0)='./file0\x00'}, 0x10) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x8) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000840), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 01:36:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019a200000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:33 executing program 5: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b04, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254}, {&(0x7f00000014c0)=""/138}, {&(0x7f0000000400)=""/156}, {&(0x7f00000004c0)=""/4096}], 0x0, &(0x7f00000002c0)=""/204, 0xfffffffffffffdf4}}], 0x1500, 0x0, 0x0) 01:36:33 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:33 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}}], 0x40000000000035c, 0x80fe) [ 2139.000444][T20024] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:33 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000700)={0x0}, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) 01:36:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019a300000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) [ 2139.205449][T20033] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:34 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b04, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254}, {&(0x7f00000014c0)=""/138}, {&(0x7f0000000400)=""/156}, {&(0x7f00000004c0)=""/4096}], 0x0, &(0x7f00000002c0)=""/204, 0xfffffffffffffdf4}}], 0x1500, 0x42, 0x0) 01:36:34 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:34 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000700)={&(0x7f00000006c0)='./file0\x00'}, 0x10) 01:36:34 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}}], 0x40000000000035c, 0x80fe) 01:36:34 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:34 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x90, &(0x7f0000000140)=""/144, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:36:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019a400000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:34 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(0x0) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 01:36:34 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}}], 0x40000000000035c, 0x80fe) 01:36:34 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000700)={&(0x7f00000006c0)='./file0\x00'}, 0x10) syz_init_net_socket$ax25(0x3, 0x5, 0x0) 01:36:34 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb0}, 0xb) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f0000000d80)=[{&(0x7f00000013c0)="a2", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) [ 2139.437525][T20048] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:34 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:34 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b04, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254}, {&(0x7f00000014c0)=""/138}, {&(0x7f0000000400)=""/156}, {&(0x7f00000004c0)=""/4096}], 0x0, &(0x7f00000002c0)=""/204, 0xfffffffffffffdf4}}], 0x1500, 0x42, 0x0) 01:36:34 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@mcast2}, 0x2) 01:36:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019a500000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:34 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000840), 0xffffffffffffffff) 01:36:34 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, 0x0) 01:36:34 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:34 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, 0x0) 01:36:34 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:36:34 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff}) socket$can_bcm(0x1d, 0x2, 0x2) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r1}, 0x10) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0}, 0x0) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, 0x0, 0x5) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14}, 0x14}}, 0x0) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000680)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000700)={&(0x7f00000006c0)='./file0\x00'}, 0x10) syz_init_net_socket$ax25(0x3, 0x0, 0x0) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000740)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000007c0)=0x1, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000000840), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000a80)=@raw=[@alu, @alu, @map_val={0x18, 0x0, 0x2, 0x0, r0}], &(0x7f0000000b00)='GPL\x00', 0x800, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b80)={0x5, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c40)}, 0x80) [ 2139.779637][T20067] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:34 executing program 4: bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000a80)=@raw=[@map_val, @generic, @alu], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b80)={0x5}, 0x10}, 0x80) 01:36:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019a600000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:34 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8953, 0x0) [ 2140.021784][T20083] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:34 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b04, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254}, {&(0x7f00000014c0)=""/138}, {&(0x7f0000000400)=""/156}, {&(0x7f00000004c0)=""/4096}], 0x0, &(0x7f00000002c0)=""/204, 0xfffffffffffffdf4}}], 0x1500, 0x42, 0x0) 01:36:34 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:34 executing program 5: syz_init_net_socket$ax25(0x3, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000840), 0xffffffffffffffff) 01:36:34 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) 01:36:34 executing program 4: pipe(&(0x7f0000000000)) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, 0x0) syz_init_net_socket$ax25(0x3, 0x0, 0x0) 01:36:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019a700000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:35 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:36:35 executing program 5: r0 = socket$inet6(0x18, 0x3, 0x0) readv(r0, &(0x7f0000000040)=[{0x0}], 0x1) 01:36:35 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x1ec, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x1c4, 0x11d, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}]}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x794e923d9da2a4b0}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) [ 2140.153047][T20086] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:35 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:35 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b04, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254}, {&(0x7f00000014c0)=""/138}, {&(0x7f0000000400)=""/156}, {&(0x7f00000004c0)=""/4096}], 0x0, &(0x7f00000002c0)=""/204, 0xfffffffffffffdf4}}], 0x1500, 0x42, 0x0) 01:36:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019a800000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:35 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000200)="25f6ae9193c6f22408bfc246eea7966711faa6917233dd2c202e4e22b07c911406a8ea1b20c5c59177fd21761d0b3a6c004224ba538ffb2b6f6c527793f18c61bebf1769da98dc57b8963559b0bda4a41fe31d3c5762bbc21acc2373763bbefb4c4d88a796ee8163279ef4c8127a214243ce4e87212f0f273c2d044d41489dea0efd344756ddb00ace654a777e65a427f7a636ad748d619dd434a72ab81b5affa4336413d2bdfc8692a56bee1488cddfdb39defab89bc31c336a1602b058af882c0782a5e1f41b20447a98e37424b8ba43d40668e7c5358cd6068e709f20c9ceaf6d3d4820197af1425b36f24e9efad8476a98e834", 0xf5}, {&(0x7f0000000300)="2d960cb2c3ee6dbd535e50765c0b024cf96c5a9e62582254412a5ae104baf526137722e8ac058f8075abe393b7fd3fc0eaf248d41fd22db2b6fe1b82ce0de7cfb5dee067f4b9bd03de57d5f8bc6cad01015b0b89680ca7496e47cdd90e60f347cc388d08d1cdc3003c4930a95c8f74e3f8dfb4a48859dd447552683377a371bb83f786ce20e5294466d3039f0a90c461fe45ed0777fb6d0fe83e3a780505d8f34636ab9cb7f1f9449e7be53123ebf3fde7c6eb6b59d8c928cbec391a64857300cf1752994dc752b3ad1e11b05b2fdad459b10315dcd455cf769a", 0xda}, {&(0x7f0000000400)="f185e5a32d19d8faf0f14f940c0b8b91feccbee60d5f59e2593dccafb69c2343acf7b933ff87669c140234a0b712b3633428174aa7d5dad63a4b22ba3581435549c27ce769d3020c7f4df672553963aac2104319209466acef7fafb938fc52a724ea817d4c1e6f9447cf90e939870400acae9d561097a7853e7401695283a2eed7fb947f2a08fa08ee01cd3f1cd9609f0085fc078e7e7caf6735d5fbe2dba2dc3abb951247016520196ee4ed5f6e89f93d34e9b9a56da3da5b522a878a8e562e06bc34ce51bd81f9045d2cceffa71411e25d90897b8f5b595b951928bcb73d94dead0eca0b3962a718d415755494d009e5e89b9ec4e064136f099582fca633e06a5716015dfe455d79be64ccabe21a2573fb534beea4973d9e17e8f6cbb98019f39ca0f28d3818743d58e10014c96ee04033895f9fed9cee69f4dd6e7eb1cb4f27505b8260aa853386c3782a3dda6238706a07f67f4c4827c53a90cb78be2128df4fe649a790338776be2f1df7811c6b21162ddcb43f6d0d8e1f16fb8221bb97a587db3463c35b96f3fcc85fbac9e0adf023f401dac86b532b4243f799fedd1b9526987429772b823fe8ab80de7592a01bfaa5885b1b21374ecb25e209e23c96e00ce9c7990c625d975e30825c834ac3db07bd90d9da258ea14dcb739bd9b574042a29c8178361291d5cd163586514cc09c1a6ed7eafc1bc845d4968de870c737aa16c92259201493db47069859bb0c4a4cc555cef657540cb89a7a20623e81ffd66418af68b5c8837e2b664dcfcdd6c0cf08367def892f13e6524ce392f2ef3544002a1b1383b63411ca1fc7f2e0cfb29fba90c8575875989553912ee849d54be560d340f5846381814ce9cd7035020f59e35f3a801738cc4426de5ba1bc5c962da4a2c641adb8210c3bfcd0e3685efbfbdd183093e9996e116b6fde1fd1e2a706d0a5ed4dcd5eba021b49931fda9a02bd83fb8088f241b02efa1e37c301db78b9d78f2a6caaf6806dfb55e6a0de2e9447e62fa5f4092a0d198c88206ff7221bf7087e798d4e3138f6e8de84cfc78b6f90131b8479433c95ef257b33efb414e889ed3edefe4d0db2a684aa9d6678049a8645a1100c86d5c9b673bfbf7dccab780d99aa619705e7a9ef757a64a1b34ca7c8df0bd1952e4b81e500a721c1991bc1a1aba8fa1409faac553db78620a3813dcf0dfc782164cab6cd69f9ea2b20f775240fc070bcad30118ee22e4f408a9104f11a1fcd9a795e550010b9a56571c43bd9691c32cc076b0e4a54382af28fc05fcec39e91a00094577ed313e7ed985ac3f1b40322e8e711f595940f3d844368f9477638aaa1d039a2530ed2d57532588ef1222e7493b169ad9310d9865999c3fceb87a2c3114d73e881ddb378026a588701fb2c6bdbad6859c99f7824ce6ac6344b37161b003270e56d26626e729180edd91755a2f731672b109733629d19b5d492e262e09101b1fa7504b548b12fd6055912cf31e622504bacce9977e419fa6be3e6974813ffe00c76a6af380ff8f39f5a65607407b7b0214efb363d730e59a7ec007393e62fc24080ebbb9ff6f7db3b4488204598360895fdc4024395377b344a89cec6c810b9e8abf912808dc28a776919b98873530cdc70665e89634c4293341fd70bcbeb1b41608737db1dd1c5045ff8eeb2255634a6218eab16c8bd4afa8e928c5a7b5e8fb75936c2e787598f4e5a2ab73e2f1551caff4cdc430a7741b272505cae8bdc8dbdd4617c7b42a62ff1a18e4de470d97e80247eae96e0615654542a2bb045750b89b5397d9806a111cd04f12463e86efc7300a6c982490c944e61c4a7dea548e186252edf067478826fac120cdf8b97922fe5caeb5616dfb41dfb88c8b34b003f79d834fef96f1625e164526024864538e6e5452b7f0f8b6893a265f9e9b7444daf56ca3f25e197e6e3852aef71d0f3e278d53b791207fb825170f5a83ccc7dffcf09ad83700030af78dde4fb65dcbfba995e266db433da7a535664eb5ea6ced4e1ed278810128f0de43eed09eb05c687707f181d687e9f1f94024c610016f01d02101b68d637c0326efa5f033907ab601e997", 0x5ca}], 0x3, &(0x7f0000001a80)=[@cred], 0x68}, 0x0) 01:36:35 executing program 5: setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) 01:36:35 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b04, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254}, {&(0x7f00000014c0)=""/138}, {&(0x7f0000000400)=""/156}, {&(0x7f00000004c0)=""/4096}], 0x0, &(0x7f00000002c0)=""/204, 0xfffffffffffffdf4}}], 0x1500, 0x42, 0x0) 01:36:35 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:35 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, 0x0) [ 2140.399036][T20109] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:35 executing program 5: pipe(&(0x7f0000000180)) syz_init_net_socket$ax25(0x3, 0x5, 0x0) 01:36:35 executing program 3: ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, 0x0) 01:36:35 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b04, 0x0) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254}, {&(0x7f00000014c0)=""/138}, {&(0x7f0000000400)=""/156}, {&(0x7f00000004c0)=""/4096}], 0x0, &(0x7f00000002c0)=""/204, 0xfffffffffffffdf4}}], 0x1500, 0x42, 0x0) 01:36:35 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'ip6gre0\x00', r1, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0}}) 01:36:35 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:35 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="80", 0x1}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40000) sendmsg(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) 01:36:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019a900000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:35 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b04, 0x0) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254}, {&(0x7f00000014c0)=""/138}, {&(0x7f0000000400)=""/156}, {&(0x7f00000004c0)=""/4096}], 0x0, &(0x7f00000002c0)=""/204, 0xfffffffffffffdf4}}], 0x1500, 0x42, 0x0) 01:36:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x64, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @random="9d6d1bf2e078"}}, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}]}, 0x80}}, 0x0) 01:36:35 executing program 5: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254}, {&(0x7f00000014c0)=""/138}, {&(0x7f0000000400)=""/156}, {&(0x7f00000004c0)=""/4096}], 0x0, &(0x7f00000002c0)=""/204, 0xfffffffffffffdf4}}], 0x1500, 0x0, 0x0) 01:36:35 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) [ 2140.731347][T20135] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:35 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b04, 0x0) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254}, {&(0x7f00000014c0)=""/138}, {&(0x7f0000000400)=""/156}, {&(0x7f00000004c0)=""/4096}], 0x0, &(0x7f00000002c0)=""/204, 0xfffffffffffffdf4}}], 0x1500, 0x42, 0x0) 01:36:35 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x10) 01:36:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019aa00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:35 executing program 3: r0 = socket(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000140)={0x0, @in, 0x0, 0x0, 0x10}, 0x98) 01:36:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) sendmmsg$unix(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="47e59b86595adcccab2de3e954de53bb5a98bc975a0dc1b11e5067e59ff8db015015a2579c5ce95a3b817ae5da9a2bcdde29f7"}, {&(0x7f0000000100)="1f418cef6a764ff671a26fe3e8fa79f1938c0e51ef0d647a92fed5abaf4de0965a2ec60e71b9e080b4b7eb0daff0d44e5be0a8a0783ac7de15e18b43c639464c430c56c38185f46b518292618858580dca32136dab5b4403fd8c8a52d1dc"}], 0x0, &(0x7f0000000340)=[@rights, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @cred={{0x0, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}]}}], 0x80002cd, 0x0) 01:36:35 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:35 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254}, {&(0x7f00000014c0)=""/138}, {&(0x7f0000000400)=""/156}, {&(0x7f00000004c0)=""/4096}], 0x0, &(0x7f00000002c0)=""/204, 0xfffffffffffffdf4}}], 0x1500, 0x42, 0x0) 01:36:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019ab00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:35 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 01:36:35 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:35 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000a80)=@raw=[@map_val], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:36:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 01:36:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019ac00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000004, &(0x7f0000b63fe4), 0x1c) 01:36:36 executing program 3: socket$can_bcm(0x1d, 0x2, 0x2) syz_init_net_socket$ax25(0x3, 0x5, 0x0) 01:36:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254}, {&(0x7f00000014c0)=""/138}, {&(0x7f0000000400)=""/156}, {&(0x7f00000004c0)=""/4096}], 0x0, &(0x7f00000002c0)=""/204, 0xfffffffffffffdf4}}], 0x1500, 0x42, 0x0) 01:36:36 executing program 4: pipe(&(0x7f0000000000)) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x0, 0x0) 01:36:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019ad00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:36 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254}, {&(0x7f00000014c0)=""/138}, {&(0x7f0000000400)=""/156}, {&(0x7f00000004c0)=""/4096}], 0x0, &(0x7f00000002c0)=""/204, 0xfffffffffffffdf4}}], 0x1500, 0x0, 0x0) 01:36:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254}, {&(0x7f00000014c0)=""/138}, {&(0x7f0000000400)=""/156}, {&(0x7f00000004c0)=""/4096}], 0x0, &(0x7f00000002c0)=""/204, 0xfffffffffffffdf4}}], 0x1500, 0x42, 0x0) 01:36:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019ae00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:36 executing program 4: r0 = socket(0x18, 0x0, 0x1) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) 01:36:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffff", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:36 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}}, 0x0) 01:36:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254}, {&(0x7f00000014c0)=""/138}, {&(0x7f0000000400)=""/156}, {&(0x7f00000004c0)=""/4096}], 0x0, &(0x7f00000002c0)=""/204, 0xfffffffffffffdf4}}], 0x1500, 0x42, 0x0) 01:36:36 executing program 4: r0 = socket(0x0, 0x94267e12ada1dae1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = getpid() sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000004}, 0xc000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40005}, 0x40c1) syz_open_procfs$namespace(r1, &(0x7f0000000500)='ns/time_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 01:36:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019af00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffff", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:37 executing program 3: clock_getres(0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') syz_clone3(&(0x7f0000000300)={0x40000000, 0x0, &(0x7f0000000040), &(0x7f0000000080), {0x29}, 0x0, 0x0, &(0x7f00000001c0)=""/224, 0x0}, 0x58) 01:36:37 executing program 4: r0 = socket(0x0, 0x94267e12ada1dae1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = getpid() sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000004}, 0xc000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40005}, 0x40c1) syz_open_procfs$namespace(r1, &(0x7f0000000500)='ns/time_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 01:36:37 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254}, {&(0x7f00000014c0)=""/138}, {&(0x7f0000000400)=""/156}, {&(0x7f00000004c0)=""/4096}], 0x0, &(0x7f00000002c0)=""/204, 0xfffffffffffffdf4}}], 0x1500, 0x42, 0x0) 01:36:37 executing program 5: syz_clone3(&(0x7f0000000340)={0x20200000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 01:36:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019b000000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:37 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffff", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:37 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254}, {&(0x7f00000014c0)=""/138}, {&(0x7f0000000400)=""/156}, {&(0x7f00000004c0)=""/4096}], 0x0, &(0x7f00000002c0)=""/204, 0xfffffffffffffdf4}}], 0x1500, 0x42, 0x0) 01:36:37 executing program 5: syz_clone3(&(0x7f0000000340)={0x20200000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 01:36:37 executing program 4: clock_getres(0x0, 0x0) symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') syz_clone3(&(0x7f0000000300)={0x40000000, 0x0, &(0x7f0000000040), 0x0, {0x29}, &(0x7f00000000c0)=""/48, 0x30, &(0x7f00000001c0)=""/224, 0x0}, 0x58) 01:36:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019b100000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:37 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254}, {&(0x7f00000014c0)=""/138}, {&(0x7f0000000400)=""/156}, {&(0x7f00000004c0)=""/4096}], 0x0, &(0x7f00000002c0)=""/204, 0xfffffffffffffdf4}}], 0x1500, 0x42, 0x0) 01:36:37 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff00", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) [ 2142.431674][T20210] lo speed is unknown, defaulting to 1000 [ 2142.729105][T20226] lo speed is unknown, defaulting to 1000 01:36:37 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) 01:36:37 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254}, {&(0x7f00000014c0)=""/138}, {&(0x7f0000000400)=""/156}, {&(0x7f00000004c0)=""/4096}], 0x0, &(0x7f00000002c0)=""/204, 0xfffffffffffffdf4}}], 0x1500, 0x42, 0x0) 01:36:37 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff00", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019b200000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:37 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20}, 0x37) listen(r0, 0xc) accept(r0, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) 01:36:37 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254}, {&(0x7f00000014c0)=""/138}, {&(0x7f0000000400)=""/156}, {&(0x7f00000004c0)=""/4096}], 0x0, &(0x7f00000002c0)=""/204, 0xfffffffffffffdf4}}], 0x1500, 0x42, 0x0) [ 2143.085082][T20238] __nla_validate_parse: 50 callbacks suppressed [ 2143.085101][T20238] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:37 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254}, {&(0x7f00000014c0)=""/138}, {&(0x7f0000000400)=""/156}, {&(0x7f00000004c0)=""/4096}], 0x0, &(0x7f00000002c0)=""/204, 0xfffffffffffffdf4}}], 0x1500, 0x42, 0x0) [ 2143.140817][T20246] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:38 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x42, 0x0) [ 2143.190582][T20249] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:36:38 executing program 4: syz_genetlink_get_family_id$fou(&(0x7f0000000840), 0xffffffffffffffff) 01:36:38 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) 01:36:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019b300000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:38 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x42, 0x0) 01:36:38 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff00", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:38 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x42, 0x0) [ 2143.426851][T20263] validate_nla: 9 callbacks suppressed [ 2143.426872][T20263] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, 0x0) [ 2143.469278][T20261] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2143.501217][T20263] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:36:38 executing program 3: clock_getres(0x0, 0x0) symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') syz_clone3(&(0x7f0000000300)={0x40000000, 0x0, &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/48, 0x30, 0x0, 0x0}, 0x58) [ 2143.554564][T20261] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2143.672956][T20274] lo speed is unknown, defaulting to 1000 01:36:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019b400000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:38 executing program 5: syz_clone3(&(0x7f0000000300)={0x40000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) 01:36:38 executing program 4: clock_getres(0x0, 0x0) symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, 0x0) syz_clone3(&(0x7f0000000300)={0x40000000, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, &(0x7f00000001c0)=""/224, 0x0}, 0x58) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, 0x0) 01:36:38 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff0000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:38 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0), 0x0, 0x42, 0x0) 01:36:38 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0), 0x0, 0x42, 0x0) [ 2143.957323][T20277] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2144.015616][T20282] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2144.027069][T20286] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:38 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff0000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:38 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0), 0x0, 0x42, 0x0) [ 2144.127320][T20282] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2144.207447][T20280] lo speed is unknown, defaulting to 1000 01:36:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019b500000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254, 0xfe}, {&(0x7f00000014c0)=""/138, 0x8a}, {&(0x7f0000000400)=""/156, 0x9c}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x4, &(0x7f00000002c0)=""/204, 0xcc}}], 0x1, 0x42, 0x0) [ 2144.250653][T20293] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2144.325040][T20296] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254, 0xfe}, {&(0x7f00000014c0)=""/138, 0x8a}, {&(0x7f0000000400)=""/156, 0x9c}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x4, &(0x7f00000002c0)=""/204, 0xcc}}], 0x1, 0x42, 0x0) 01:36:39 executing program 3: clock_getres(0x0, 0x0) symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') syz_clone3(&(0x7f0000000300)={0x40000000, 0x0, &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/48, 0x30, 0x0, 0x0}, 0x58) 01:36:39 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff0000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) [ 2144.695669][T20287] lo speed is unknown, defaulting to 1000 [ 2144.939500][T20307] lo speed is unknown, defaulting to 1000 01:36:40 executing program 5: clock_getres(0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x40000000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 01:36:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019b600000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:40 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254, 0xfe}, {&(0x7f00000014c0)=""/138, 0x8a}, {&(0x7f0000000400)=""/156, 0x9c}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x4, &(0x7f00000002c0)=""/204, 0xcc}}], 0x1, 0x42, 0x0) 01:36:40 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:40 executing program 4: clock_getres(0x0, 0x0) symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') syz_clone3(&(0x7f0000000300)={0x40000000, 0x0, &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/48, 0x30, 0x0, 0x0}, 0x58) [ 2145.347344][T20319] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:40 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, 0x0, 0x0, &(0x7f00000002c0)=""/204, 0xcc}}], 0x1, 0x42, 0x0) 01:36:40 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019b700000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) [ 2145.497045][T20317] lo speed is unknown, defaulting to 1000 01:36:40 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, 0x0, 0x0, &(0x7f00000002c0)=""/204, 0xcc}}], 0x1, 0x42, 0x0) [ 2145.601180][T20327] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:40 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, 0x0, 0x0, &(0x7f00000002c0)=""/204, 0xcc}}], 0x1, 0x42, 0x0) 01:36:40 executing program 3: clock_getres(0x0, 0x0) symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') syz_clone3(&(0x7f0000000300)={0x40000000, 0x0, &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/48, 0x30, 0x0, 0x0}, 0x58) 01:36:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019b800000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) [ 2145.901170][T20321] lo speed is unknown, defaulting to 1000 [ 2145.948250][T20337] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2146.192199][T20339] lo speed is unknown, defaulting to 1000 01:36:41 executing program 5: symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') syz_clone3(&(0x7f0000000300)={0x40000000, 0x0, &(0x7f0000000040), 0x0, {0x29}, &(0x7f00000000c0)=""/48, 0x30, &(0x7f00000001c0)=""/224, 0x0}, 0x58) 01:36:41 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254, 0xfe}, {&(0x7f00000014c0)=""/138, 0x8a}, {&(0x7f0000000400)=""/156, 0x9c}], 0x3, &(0x7f00000002c0)=""/204, 0xcc}}], 0x1, 0x42, 0x0) 01:36:41 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019b900000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x8c, 0x2e, 0x0, 0x70bd2b, 0x0, {}, [@typed={0x1d, 0x0, 0x0, 0x0, @binary="69dca9f330cae6a64c82790a83db6a4b0352a120ff6781d177"}, @nested={0x56, 0x8b, 0x0, 0x1, [@generic="bde23c963485f203a4a5813b1d7442b8886a4cfe12860b0640ea4d5da528ec230811ff79c6ac372df3478abe6fbd532278e556b192b77b0a7f33689a20d5b696d83d708ab6fbb9b51d4e47b2af31d653cf1b"]}]}, 0x8c}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2146.651359][T20347] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:41 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254, 0xfe}, {&(0x7f00000014c0)=""/138, 0x8a}, {&(0x7f0000000400)=""/156, 0x9c}], 0x3, &(0x7f00000002c0)=""/204, 0xcc}}], 0x1, 0x42, 0x0) 01:36:41 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019ba00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:41 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254, 0xfe}, {&(0x7f00000014c0)=""/138, 0x8a}, {&(0x7f0000000400)=""/156, 0x9c}], 0x3, &(0x7f00000002c0)=""/204, 0xcc}}], 0x1, 0x42, 0x0) 01:36:41 executing program 4: clock_getres(0x0, 0x0) symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, 0x0) syz_clone3(&(0x7f0000000300)={0x40000000, 0x0, &(0x7f0000000040), &(0x7f0000000080), {0x29}, &(0x7f00000000c0)=""/48, 0x30, &(0x7f00000001c0)=""/224, &(0x7f00000002c0)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6}, 0x58) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, 0x0) [ 2146.890865][T20353] lo speed is unknown, defaulting to 1000 [ 2146.962348][T20362] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2147.253510][T20364] lo speed is unknown, defaulting to 1000 01:36:44 executing program 3: clock_getres(0x0, 0x0) symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') syz_clone3(&(0x7f0000000300)={0x40000000, 0x0, &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/48, 0x30, 0x0, 0x0}, 0x58) 01:36:44 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019bb00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:44 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254, 0xfe}, {&(0x7f00000014c0)=""/138, 0x8a}, {&(0x7f0000000400)=""/156, 0x9c}, {0x0}], 0x4, &(0x7f00000002c0)=""/204, 0xcc}}], 0x1, 0x42, 0x0) 01:36:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="06000000000000009c000040"]) 01:36:44 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254, 0xfe}, {&(0x7f00000014c0)=""/138, 0x8a}, {&(0x7f0000000400)=""/156, 0x9c}, {0x0}], 0x4, &(0x7f00000002c0)=""/204, 0xcc}}], 0x1, 0x42, 0x0) [ 2149.894215][T20379] __nla_validate_parse: 13 callbacks suppressed [ 2149.894237][T20379] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2150.019674][T20385] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2150.040245][T20392] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:36:44 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254, 0xfe}, {&(0x7f00000014c0)=""/138, 0x8a}, {&(0x7f0000000400)=""/156, 0x9c}, {0x0}], 0x4, &(0x7f00000002c0)=""/204, 0xcc}}], 0x1, 0x42, 0x0) 01:36:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:45 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019bc00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) [ 2150.181546][T20391] lo speed is unknown, defaulting to 1000 [ 2150.307182][T20408] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2150.344158][T20409] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2150.435929][T20408] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:36:45 executing program 3: symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') syz_clone3(&(0x7f0000000300)={0x40000000, 0x0, &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/48, 0x30, &(0x7f00000001c0)=""/224, 0x0}, 0x58) 01:36:45 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254, 0xfe}, {&(0x7f00000014c0)=""/138, 0x8a}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x3, &(0x7f00000002c0)=""/204, 0xcc}}], 0x1, 0x42, 0x0) 01:36:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:45 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019bd00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) [ 2150.857722][T20418] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:45 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254, 0xfe}, {&(0x7f00000014c0)=""/138, 0x8a}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x3, &(0x7f00000002c0)=""/204, 0xcc}}], 0x1, 0x42, 0x0) [ 2150.901309][T20418] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:36:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019be00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) [ 2151.003366][T20420] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:45 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254, 0xfe}, {&(0x7f00000014c0)=""/138, 0x8a}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x3, &(0x7f00000002c0)=""/204, 0xcc}}], 0x1, 0x42, 0x0) 01:36:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa9697") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:45 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) [ 2151.159959][T20434] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2151.177236][T20426] lo speed is unknown, defaulting to 1000 [ 2151.219445][T20434] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2151.320081][T20441] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa9697") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:46 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254, 0xfe}, {&(0x7f00000014c0)=""/138, 0x8a}, {0x0}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x4, &(0x7f00000002c0)=""/204, 0xcc}}], 0x1, 0x42, 0x0) 01:36:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019bf00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa9697") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:46 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) [ 2151.789281][T20451] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:46 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254, 0xfe}, {&(0x7f00000014c0)=""/138, 0x8a}, {0x0}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x4, &(0x7f00000002c0)=""/204, 0xcc}}], 0x1, 0x42, 0x0) [ 2151.852578][T20452] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2151.944759][T20456] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:36:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa9697") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:46 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254, 0xfe}, {&(0x7f00000014c0)=""/138, 0x8a}, {0x0}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x4, &(0x7f00000002c0)=""/204, 0xcc}}], 0x1, 0x42, 0x0) 01:36:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:46 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019c000000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:47 executing program 3: newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 01:36:47 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254, 0xfe}, {&(0x7f0000000400)=""/156, 0x9c}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x3, &(0x7f00000002c0)=""/204, 0xcc}}], 0x1, 0x42, 0x0) [ 2152.206228][T20473] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa9697") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:47 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)={0x3c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "41283a34dac77cdb1859882d52de8e116267fa57b1f4e653"}]]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc030000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="e00333008000000008021100000008021100000108021100000100000000000000000000f6ffffff000601010101010103010a04060a000000000005030000002a01012d1a"], 0x3fc}}, 0x0) 01:36:47 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254, 0xfe}, {&(0x7f0000000400)=""/156, 0x9c}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x3, &(0x7f00000002c0)=""/204, 0xcc}}], 0x1, 0x42, 0x0) 01:36:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019c100000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2152.449720][T20493] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:47 executing program 3: clock_getres(0x0, 0x0) symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, 0x0) syz_clone3(&(0x7f0000000300)={0x40000000, 0x0, 0x0, &(0x7f0000000080), {0x29}, 0x0, 0x0, &(0x7f00000001c0)=""/224, 0x0}, 0x58) 01:36:47 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254, 0xfe}, {&(0x7f0000000400)=""/156, 0x9c}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x3, &(0x7f00000002c0)=""/204, 0xcc}}], 0x1, 0x42, 0x0) 01:36:47 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019c200000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2152.630153][T20503] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa9697") ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:47 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254, 0xfe}, {0x0}, {&(0x7f0000000400)=""/156, 0x9c}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x4, &(0x7f00000002c0)=""/204, 0xcc}}], 0x1, 0x42, 0x0) 01:36:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019c300000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:47 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254, 0xfe}, {0x0}, {&(0x7f0000000400)=""/156, 0x9c}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x4, &(0x7f00000002c0)=""/204, 0xcc}}], 0x1, 0x42, 0x0) 01:36:47 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) [ 2152.898225][T20505] lo speed is unknown, defaulting to 1000 01:36:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:47 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254, 0xfe}, {0x0}, {&(0x7f0000000400)=""/156, 0x9c}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x4, &(0x7f00000002c0)=""/204, 0xcc}}], 0x1, 0x42, 0x0) [ 2153.049890][T20521] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:48 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)='\n', 0x1) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe63d4c0d1629efc0f73eb", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB], 0x20000600}}, 0x0) r2 = accept$alg(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000004440)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000013c0)=[{0x0}, {&(0x7f0000000280)=""/88, 0x58}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/143, 0x8f}], 0x4, &(0x7f0000001440)=""/85, 0x55}, 0x6}, {{&(0x7f00000014c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001540)=""/87, 0x57}, {&(0x7f00000015c0)=""/137, 0x89}, {&(0x7f0000001680)=""/168, 0xa8}, {0x0}, {0x0}], 0x5, &(0x7f00000018c0)=""/237, 0xed}, 0x1}, {{&(0x7f00000019c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000001f40)=""/122, 0x7a}, 0xffffffc0}, {{&(0x7f0000001fc0)=@sco, 0x80, &(0x7f00000023c0)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000002440)=""/63, 0x3f}, 0xa5}, {{0x0, 0x0, &(0x7f0000003840)=[{&(0x7f0000002500)=""/147, 0x93}, {&(0x7f00000025c0)=""/200, 0xc8}, {0x0}, {&(0x7f00000036c0)=""/209, 0xd1}], 0x4, &(0x7f00000038c0)=""/90, 0x5a}, 0xd6f}, {{0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f0000003bc0)=""/127, 0x7f}], 0x1}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004340)=""/228, 0xe4}, 0xfffffffd}], 0x7, 0x0, 0x0) 01:36:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa9697") ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:48 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f00000014c0)=""/138, 0x8a}, {&(0x7f0000000400)=""/156, 0x9c}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x3, &(0x7f00000002c0)=""/204, 0xcc}}], 0x1, 0x42, 0x0) 01:36:48 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019c400000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:48 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f00000014c0)=""/138, 0x8a}, {&(0x7f0000000400)=""/156, 0x9c}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x3, &(0x7f00000002c0)=""/204, 0xcc}}], 0x1, 0x42, 0x0) [ 2153.660515][T20546] "syz-executor.3" (20546) uses obsolete ecb(arc4) skcipher [ 2153.682042][T20541] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:48 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:48 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f00000014c0)=""/138, 0x8a}, {&(0x7f0000000400)=""/156, 0x9c}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x3, &(0x7f00000002c0)=""/204, 0xcc}}], 0x1, 0x42, 0x0) 01:36:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa9697") ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019c500000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:49 executing program 3: clock_getres(0x0, 0x0) symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') syz_clone3(&(0x7f0000000300)={0x40000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x29}, &(0x7f00000000c0)=""/48, 0x30, &(0x7f00000001c0)=""/224, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x7}, 0x58) 01:36:49 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{0x0}, {&(0x7f00000014c0)=""/138, 0x8a}, {&(0x7f0000000400)=""/156, 0x9c}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x4, &(0x7f00000002c0)=""/204, 0xcc}}], 0x1, 0x42, 0x0) 01:36:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019c600000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:49 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:49 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{0x0}, {&(0x7f00000014c0)=""/138, 0x8a}, {&(0x7f0000000400)=""/156, 0x9c}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x4, &(0x7f00000002c0)=""/204, 0xcc}}], 0x1, 0x42, 0x0) 01:36:49 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019c700000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:49 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{0x0}, {&(0x7f00000014c0)=""/138, 0x8a}, {&(0x7f0000000400)=""/156, 0x9c}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x4, &(0x7f00000002c0)=""/204, 0xcc}}], 0x1, 0x42, 0x0) 01:36:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2154.752097][T20580] lo speed is unknown, defaulting to 1000 [ 2154.964749][T20597] __nla_validate_parse: 20 callbacks suppressed [ 2154.964771][T20597] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:50 executing program 3: r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) 01:36:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019c800000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:50 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254, 0xfe}, {&(0x7f00000014c0)=""/138, 0x8a}, {&(0x7f0000000400)=""/156, 0x9c}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x4}}], 0x1, 0x42, 0x0) 01:36:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:36:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:50 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:50 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254, 0xfe}, {&(0x7f00000014c0)=""/138, 0x8a}, {&(0x7f0000000400)=""/156, 0x9c}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x4}}], 0x1, 0x42, 0x0) [ 2155.589484][T20609] validate_nla: 3 callbacks suppressed [ 2155.589504][T20609] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2155.612938][T20609] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:36:50 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000080)={0xe}) 01:36:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019c900000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa9697") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2155.744852][T20607] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:50 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254, 0xfe}, {&(0x7f00000014c0)=""/138, 0x8a}, {&(0x7f0000000400)=""/156, 0x9c}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x4}}], 0x1, 0x42, 0x0) [ 2155.809908][T20616] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:36:50 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff00"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) [ 2155.886182][T20626] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:50 executing program 3: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000080)={0xe}) 01:36:50 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254}, {&(0x7f00000014c0)=""/138}, {&(0x7f0000000400)=""/156}, {&(0x7f00000004c0)=""/4096}], 0x0, &(0x7f00000002c0)=""/204, 0xfffffffffffffdf4}}], 0x1500, 0x0, 0x0) [ 2155.951371][T20632] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:36:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:36:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019ca00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) [ 2156.133336][T20640] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa9697") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x400000b0, 0x0, 0x2ec}]}) [ 2156.206642][T20643] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:51 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 01:36:51 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff00"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:51 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254}, {&(0x7f00000014c0)=""/138}, {&(0x7f0000000400)=""/156}, {&(0x7f00000004c0)=""/4096}], 0x0, &(0x7f00000002c0)=""/204, 0xfffffffffffffdf4}}], 0x1500, 0x0, 0x0) 01:36:51 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 2156.437365][T20655] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2156.491163][T20659] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa9697") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2156.542276][T20655] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:51 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 2156.594216][T20659] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:36:51 executing program 3: symlinkat(0x0, 0xffffffffffffff9c, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) 01:36:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019cb00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:51 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff00"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:51 executing program 3: symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 01:36:51 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 2156.798560][T20676] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa9697") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:51 executing program 3: syz_clone3(&(0x7f0000000400)={0x4000180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 01:36:51 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d00"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019cc00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:51 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000001580)=""/254}, {&(0x7f00000014c0)=""/138}, {&(0x7f0000000400)=""/156}, {&(0x7f00000004c0)=""/4096}], 0x0, &(0x7f00000002c0)=""/204, 0xfffffffffffffdf4}}], 0x1500, 0x0, 0x0) 01:36:51 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 01:36:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f00001d8000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:51 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 2157.115715][T20693] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:51 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d00"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019cd00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa9697") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:36:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:52 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @multicast2}, 0x106}) [ 2157.394545][T20710] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:52 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = getuid() r2 = syz_clone(0x2000, &(0x7f0000000000), 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="1046e73016b4cf39f4192993941cc641d2c2af434b00062be5f747df0ae2190edbf97674acdb5a79b1a38dfa7a5e65da0b02436b8d967607e34d7d9fff1ad7d92dd22a4c7349ec0dba470d07b69817e6ebb7eef64785c4684dfb61f7cb6e75f8c2911b") msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000140)={{0x0, r1, 0xee00, 0xffffffffffffffff, 0xee00, 0x3, 0xd426}, 0x0, 0x0, 0x9, 0x6, 0xffffffffffff0000, 0xff, 0x3ff, 0x7ff, 0x1f, 0x5, r2, 0xffffffffffffffff}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) setxattr$security_ima(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0xe, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800000, &(0x7f0000004180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1400}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x1}}, {@max_read={'max_read', 0x3d, 0x4}}, {@max_read={'max_read', 0x3d, 0x80000001}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0xed}}, {@blksize={'blksize', 0x3d, 0xc00}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x3}}], [{@obj_user={'obj_user', 0x3d, '/dev/fuse\x00'}}, {@hash}, {@uid_lt={'uid<', r4}}]}}) 01:36:52 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d00"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019ce00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa9697") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:36:52 executing program 1: open$dir(0x0, 0x121202, 0x0) 01:36:52 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 2157.640222][T20728] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2157.650608][T20722] fuseblk: Unknown parameter 'obj_user' 01:36:52 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d000100"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:52 executing program 3: clock_getres(0x0, 0x0) symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, 0x0) syz_clone3(&(0x7f0000000300)={0x40000000, 0x0, 0x0, &(0x7f0000000080), {0x29}, &(0x7f00000000c0)=""/48, 0x30, &(0x7f00000001c0)=""/224, 0x0}, 0x58) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, 0x0) 01:36:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019cf00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa9697") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:36:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:52 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 2157.865766][T20740] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:52 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 2158.018772][T20748] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2158.051849][T20739] lo speed is unknown, defaulting to 1000 01:36:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019d000000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:52 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d000100"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 01:36:52 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa9697") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 2158.194519][T20760] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:53 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa9697") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 2158.439159][T20768] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 01:36:53 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r1, &(0x7f0000000080)={0x18, 0x0, r2}, 0x18) 01:36:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019d100000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 01:36:53 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa9697") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 01:36:53 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d000100"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:53 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa9697") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 01:36:53 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r1, &(0x7f0000000080)={0x18, 0x0, r2}, 0x18) 01:36:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 2158.985389][T20782] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:53 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa9697") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 01:36:53 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r1, &(0x7f0000000080)={0x18, 0x0, r2}, 0x18) 01:36:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019d200000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:54 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa9697") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 01:36:54 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d00010066"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:54 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r1, &(0x7f0000000080)={0x18, 0x0, r2}, 0x18) 01:36:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019d300000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa9697") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:54 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) 01:36:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa9697") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2159.426360][T20808] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 01:36:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019d400000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:54 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) 01:36:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:54 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d00010066"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa9697") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:54 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0x2020) 01:36:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019d500000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:54 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0x2020) 01:36:54 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa9697") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 01:36:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:54 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0x2020) 01:36:54 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa9697") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 01:36:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:54 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d00010066"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019d600000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) [ 2159.986832][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 01:36:54 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) 01:36:54 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa9697") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 01:36:54 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) [ 2160.117907][T20865] __nla_validate_parse: 29 callbacks suppressed [ 2160.117927][T20865] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa9697") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 01:36:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2160.191284][T20873] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2160.219329][T20874] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:36:55 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) 01:36:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x10, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019d700000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:55 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:55 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0x2020) 01:36:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa9697") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 2160.467236][T20893] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:36:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:55 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0x2020) [ 2160.540024][T20897] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x10, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019d800000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) [ 2160.592671][T20899] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:55 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0x2020) 01:36:55 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) [ 2160.695693][T20913] validate_nla: 6 callbacks suppressed [ 2160.695712][T20913] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2160.726979][T20913] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:36:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa9697") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 01:36:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x10, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:55 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 01:36:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019d900000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) [ 2160.889411][T20917] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:55 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 01:36:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa9697") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2161.036104][T20923] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:55 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 2161.104322][T20935] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:55 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2161.147482][T20939] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:36:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:56 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x103) utimensat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) 01:36:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019da00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa9697") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:56 executing program 3: keyctl$instantiate(0xc, 0x0, &(0x7f00000000c0)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', 'ceph\x00'}, 0x30, 0x0) 01:36:56 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) [ 2161.427751][T20958] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:56 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) setxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) 01:36:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019db00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) [ 2161.673434][T20969] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 01:36:56 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:56 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x9}, 0x0, 0x0, 0x0, 0x0) [ 2161.724593][T20978] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa9697") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2161.775786][T20980] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 01:36:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019dc00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:56 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 01:36:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2161.970121][T20989] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:56 executing program 3: keyctl$search(0xa, 0x0, &(0x7f0000000000)='big_key\x00', 0xffffffffffffffff, 0x0) 01:36:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x10, r2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa9697") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:56 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019dd00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2162.194477][T21001] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 01:36:57 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0xffffffae) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) [ 2162.240052][T21001] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2162.257029][T21010] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x10, r2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa9697") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:57 executing program 3: fchownat(0xffffffffffffffff, 0x0, 0xee00, 0xee00, 0x1000) 01:36:57 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019de00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:57 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)={0x24, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}]}]}, 0x24}], 0x1}, 0x0) [ 2162.574528][T21032] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2162.579628][T21023] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 01:36:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x10, r2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa9697") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2162.715339][T21038] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 01:36:57 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019df00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:57 executing program 3: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$read(0xb, r2, 0x0, 0x0) 01:36:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2162.895897][T21047] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:57 executing program 3: request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0xfffffffffffffffb) 01:36:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019e000000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa9697") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:57 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:57 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') read$char_usb(r0, &(0x7f0000000040)=""/4096, 0x1000) [ 2163.160192][T21064] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:58 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') read$char_usb(r0, &(0x7f0000000040)=""/4096, 0x1000) 01:36:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019e100000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa9697") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:58 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') read$char_usb(r0, &(0x7f0000000040)=""/4096, 0x1000) 01:36:58 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2163.436881][T21080] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:36:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019e200000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:58 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') read$char_usb(r0, &(0x7f0000000040)=""/4096, 0x1000) 01:36:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:58 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa9697") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019e300000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:58 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) 01:36:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:58 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x103) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 01:36:58 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019e400000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2164.164928][T21117] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 01:36:59 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:59 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000002300)=[{&(0x7f0000001300)="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", 0xd01}], 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 01:36:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019e500000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:59 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000002300)=[{&(0x7f0000001300)="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", 0xd01}], 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 01:36:59 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019e600000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) [ 2164.577610][T21144] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 01:36:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:59 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:59 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000002300)=[{&(0x7f0000001300)="9f8f755ed0a286aff7903a230c79563d5b3a2ddf1787e2c703b0088333e635e54824a8d48b7cf54a0f5cfefcc2d54301443e5b575c76b0e32f4a9b7d159fc11a05c245a73eddfa7940cd820cd57247c9635486701faaaf047548f6cd2fc478acbc94fbf5d4817fe0293c127fa6cfc3611b04e544272946a9b184152d1c8c9d3c90e688da83482d364081d36391e56cde5d622c6413ff857a34974086beb3feff0be21572575b01837f6d77f5b9c7678913a88e8ae8ac7b87579d591659dacf0caa2403a88916238426987abb0ce5c7f26a02fba0f9a6447b528e311af1e93ea520648b9ca62db96ee7574b04005e68fa5bdb536f05f010ded7244080f67301cab6dc20a4038780c1952a46ddc3d6316152c38a7b2965f5cec39e3be43687bf5683dafdd1d1eecb102e7019301186342ed829e4f9a91956efa6942e6706086a96652db2cb8aaba1c3689ea1566b0e1b82501489932ca17463156fa8416f76da7422b77aee7328dd0c43b8095cdbc4ac8962ffe3f57d4df8522c1928b32dc52a10a199254f1c8ae6d80e4ef332945d5c691d358de97c547ef1dc90583057343ce2df5e4ab0ef2a42a61e1794fab4cafb7b3a434c250c8da52e3c63721be2d2eb170b664c44b14450a2389514dae40ff0bb9861a5e1e34c66479065844a3a5c3047c41a93dcd17b4a2b16c8732575fb657498e2f1d4d3ae14119b76331a9fc24afb223be776a1c1d9ff5450e2d4a482d862ce6f25ba9e87c8287d2f86b66fcaa0018a27d1778952068b303a310517bd2a5aad8a404fbe5ab8bbbe3c5ca9e666164978fb20ea65884858b658557cbba542d8b99dd317c93c6689067ed9ed539b92bb11c5735a36b3516bf35093b4bbc5b436af5097917655efe0bd4c3b3c4310a9f5ad0bd36e71739707ae2b15eb8971c76e4efdf082c5cc6d1623aacc08d25678622c62ddcbc776cdbebf5f9d2ea29ffd9f3666cf6a5a9e2fb8ef15e4c3be2c77b80f363820a68c6dce6b4ee319eba534061cf0aa736ef8ed02264dc23167824c80a2203c29291183a6c864c91530a73b8da9f07fa6dc56f57fc3574f32d973fa7156ad554930d431947e126cede2074b5da3b1c6cf221d49309cad673bae738f8386d118afd0c20ceec1f7ea939c36bc0b0485c7cb1dcdce581a625523ee55624bbf3927e67c78c8a0120a405c084e607125cc6b26db7667207df7d84cefbd6ff8b5d941d79f4afdfbb44d5c9dc385fde57e9c419cbf2b82150a2f34c93c7a1b3710ad22698041661d51d67c4dc2773f821f92057d87c8623e9cdd921cf4f4072d9c01c87a2e678fd6b4c4003817eed9c877b5f60a6d3bd9e22e67a00ca57d142057b154429237aa7370f871bf886bb5d9b7f32bb56d9fde9ae8930210df15b5d5a04140c6fe55d1fb501980578fc3ec69b62f0ab97da8035f362194214a6c8a1aecf3a06ed11efd1496575103fdd5ef35b4a2d361d6d5026ef8f12e4ec0ce1f57c4f0f6781372bf81c6b1884c4b9e2e27e52bb2fbfc36099c54454225f0cd7e81269862984768f8e5218d87ca1f53c9fa2db10dfa95908a63164625e01f524983ad0c420de7b475bc715fcb7dcfc81f3d68db94e05e67737b2a3b04cc676487870c5013caefc6b7b2503c344c8667d5c9c251fce1c339fc255aad7f62b3d8c1b87d3f7d6a05d0211996f2594ec136cdc1ca6f1892b794f196548eb154d3aaa9ea8eea0f2cbebfa7cd32c11c5bd159b3c371ee43ca98811867bfab34b4d0316063e48b619d2805a78cc5fd7f8c81a68404d391c406926b6bf4a51d2253ad072618cc94fbd1304b66c2bfd44f37c0480bc180bb5dfb0c01d7ec297a1b0f30748dff6becc379ed44a46ebddb0a19f4f4d43b476e6364710074e6cf88e3efce981fd1472154dc0d7fddd2011d5b72cd2b5b2771a53e3eef3de7bc3c70c0613e19c520a882fa3dcfc7250976823307e76ab0ed3474db642a31e5126ad99b7af05e4ba50f808a65a36b56347315cea003246f8b0dd31b3098bd1fd114a55f22a1e9b29502ea38785a8cd90e2f9b0a88b0144ae684e96558e16df19e106f3e490b312f839a0b46b7dcb58fa5e3b12b75dad08f2787cf87cf5740d4b1fc678a59d5ed91c4709457c30bff9f6a3e3cf9f72c10b37ff6e908e9658b43436a5819738089d320069b0cf26e224120b9a6553a4186cf9dcec29e680c092e952a5fe0f4b4d5696272d4feef33b77547e59a3aa37ae64d45f296a23019ccdf8c01bfebea2faac9757d883462b942fbc50050df72b3ba02d50051dad28410df14f3963ea6df5745471b1214105dec517d138d74bd362e4e79c37be4d113d1351dfaa5d1f3d506c174dd2aecefd7e9b2acc3f225e7181f8530d1c17c869cac08aa7ab63abf6e81a595246f6c639890a2405e9c707e766be3df4610e5ce09e4eff055547b2adafa98f8f3c7f64d0d562962fedcec0d122b6f985e2eeca51f4f30bae1e87d93d961589b779a9976960ef324ed31b311c0aab654166c761bfd0824f918be9fadd0edc831bf73530eba86a4da36c4a6daaa4e4a9d8f1e2dc3875fb896ae6bfb28e4ea715e88ddee5c27b4d7605747bab24e6798db51b59f97714c1f34f31a4f0bd5da4a31d05433cb35c059a48a814c6d90b3ae9c06418fc7cd2536a1e222a38d79d9d3ce69fb230b1eebd39ee843cdffefea18c503790e201234d97af82f9ca432c42dba6686f5d115b840f3f805bfc5e7aa4109e2418f5def4ccf8234a7e2f37f38f1cc52259e8905797e09c8d62908eac9a9173b62ae5ba07f4ddeb11ffeae983b8c8c62404eb4952eed6673885c62948ae7cd6ccf2b217ef369933b9956dd6b5ed07e19e8938f107583a4cfb08981b748ed666f93ca3134b5df08c94d5355fa723fb83e4ee4d0a7d6175495234650c11bd44d1b24cb357bac25b54a740eb20bdad1e5a9d5d60a7816059c47dae0d5f97411f82d10ad469dfb65d4c8e2a0909fdf2c096fa979ab9611b75e71ec117b1b885a401bd83e99577904c3fca3f4ccf663d3b4381234fde90e46f048375de4144977a19108642f154c80fdfec93881d5584d8a9a026942d8877bbf1533d2168b7f09205008b60f9df54542b2e4f0ee6fb11fbe9217a349a0eb11d0d2141995ae810ef11e2df8239ae58d729f077c085f3011c52a4f730b48f1fd606b25dd35dce6b54f0846116186cb4be80b447b326956fec4f759be030a319f2d8661816ffdf08ea140956e2f3c1820fe5a0a6ff7025dde11d6dbf663c2d6f63ea539cbcac1de5285c8231dedb597c76ca9104d214a5a13c7141272d98ba50f2392368220dd7a722f14967bf559a9d1e784c56db93652108993c6874454902053067cf3613b55334276e5c476b3bb0bcf1c1099e268e4ba19b46fe6f91ffc543b87a37e9e1a410163d365d5bb5ca2a5f45b436042ce86a7007f80658be3ecadd845b87b86e96d339f40399ada8ef8bc6fd9643ea8f1d5b1d97584d4ecd0f699cfc3ff5180a21e4e260021de706ed78df4f275a2936e815078ed4138160f6d8475b56c076bf378f6153e386f8540226cf59008ca0ff90aa01bd5fd18271ac6be44eecb0963dcaa60e10587b7ae4fdab3d4d4685500a7eebde1c7de1f74a9bb21e8d4831259c0ac751974843697e20fb5a75ea3e863054d6bb5c616d7b21ca3fe3af50673e2ab31277f964033f0ccf5394bbde814ee7fadf98b18a8268b6bdd4da0970d47250224b8801c5df8bbf93498eaa059d1eed47a0e72915ab66c4dca10a0f263605bfd3c31d63e7fa462a544b19eaf95558a79ec27aa39aa704ed2623fedcf3b185ab6e07ed5102dc6028749c175bae5491a651577a348b9e430ec45562d5bebdf5a314c15ccb2b41d2b66d4ba9673b7cb48e475d28638341ec87fb4c7d52c5059b6dde622e18051714d63906a823eededdcc441029017a77a480dbce18128631f568e022bf1248b0cb61c5f087129deb97914fc69f2f8a9d0579a60aa86e9edfd0382b5dfdc0ec002b95a362ec1ef508c7189d2719f68e7907f89df7021cd3bd8c54abb9c73fcd8785e7d678b097f7138dc39aaf61fd954433d226b22bfac3e5811df0e4f392187d862a38bdca8aa06054a83e0358e5b13c0ba92ef733d246c2493cc2700d695ae486b031437b9b04084abb5100346e8b0583007b46843d532b63205eb1c3b40b4a0c9f7a349c4b33df54facc769129b97711b92a89cc7f2ad4784709957ed890d2f98ecf715733ef5cd483eeb65c93b99ad3d27ba0f4239f256e68ae5d9a6ec0def7a6b24a922198d92283c85e6a262e5dd553a1068af3bba74d74af8e042cab1820940ca2bbae5670b112b40dba076f878ddadb62fcb707b5f5b9762226a14d7193f2e27559dfc8b816c85d32dcd1e47d71126deace42df7bc7fe97fe7b0d8d86dd1a1f5d50029984bd1d0ebd6727114ff92243bac7ad588d41587998bfca690039218d640f627013fffff9cef171740fc811ec573b02bbc60c5f6f8f9aa1392aba3ca4797d1e10cd02ae138dcc7ed6d60640e014f2cbf24222fdcdc909a871ba125254100252ce92035e0fe7734e4673f0ba74543e0d2fa63f8746447866f94536a4f2b923d21c49c1bff7e0be94840797c63fc9708d69f51ca8470c2a349dffb5382d859bfd88f7ccfd2b19012505c5cc1ddaa12795e32e74909bb5af7cf28e7659ffc85229584d5daecc19c28fb", 0xd01}], 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 01:36:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019e700000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:36:59 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd7000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:36:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019e800000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:36:59 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000002300)=[{&(0x7f0000001300)="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", 0xd01}], 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) [ 2165.124574][T21175] __nla_validate_parse: 34 callbacks suppressed [ 2165.124594][T21175] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:37:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019e900000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) [ 2165.285297][T21179] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:37:00 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000040)=0x3ff, 0x4) [ 2165.359287][T21180] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. 01:37:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3], 0x0, 0x10401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2165.453459][T21193] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:37:00 executing program 3: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) 01:37:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:00 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd7000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:37:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019ea00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:00 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x20482, 0x0) write$tcp_mem(r0, 0x0, 0x0) [ 2165.697991][T21209] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:37:00 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f00000001c0)='./file0\x00', 0x0) 01:37:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3], 0x0, 0x10401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 2165.819869][T21208] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:37:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a593") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:00 executing program 3: request_key(&(0x7f0000000080)='.request_key_auth\x00', 0x0, 0x0, 0xfffffffffffffffc) 01:37:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019eb00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) [ 2165.911201][T21216] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. 01:37:00 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd7000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) [ 2166.025482][T21230] validate_nla: 9 callbacks suppressed [ 2166.025502][T21230] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:00 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 2166.122318][T21236] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:37:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x3], 0x0, 0x10401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 2166.222267][T21237] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:37:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a593") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019ec00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) [ 2166.278420][T21239] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2166.335065][T21249] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:01 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd7000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:37:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019ed00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:37:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a593") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:01 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd7000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) [ 2166.579112][T21258] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019ee00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) [ 2166.850988][T21274] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:01 executing program 3: request_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000540)=',#$%\x93/{]$!$!{(k\x9a\xd2\x9b\xe5\xadqQ-\xa1k\x831\xc85*\x00', 0x0) 01:37:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:01 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd7000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:37:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019ef00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:02 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00') mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 2167.181828][T21283] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:02 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd700000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:37:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019f000000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:02 executing program 3: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)='keyring\x00', 0x0) 01:37:02 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) setxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 01:37:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2167.561867][T21307] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:02 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd700000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:37:02 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/raw6\x00') getdents64(r0, 0x0, 0x0) 01:37:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019f100000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:02 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd700000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:37:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:02 executing program 3: pipe2$9p(&(0x7f0000001100), 0x84000) [ 2167.968146][T21333] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:02 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x103) 01:37:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa96") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019f200000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:02 executing program 0: socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r2, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:37:02 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 01:37:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:03 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') ioctl$BLKBSZGET(r0, 0x80081270, 0x0) [ 2168.232722][T21349] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:03 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 01:37:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa96") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019f300000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:03 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0) 01:37:03 executing program 0: socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r2, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:37:03 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 2168.450096][T21361] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:03 executing program 3: request_key(&(0x7f0000000140)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000280)='F\x97-/}{\x00', 0x0) 01:37:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019f400000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:03 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 01:37:03 executing program 0: socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r2, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:37:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x74}}, 0x0) recvmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000102, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) 01:37:03 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 2168.769489][T21383] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019f500000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:03 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 01:37:03 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000080)=""/4096, 0x1000) 01:37:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:03 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 01:37:03 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo\x00') futimesat(r0, 0x0, 0x0) 01:37:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:37:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:03 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 01:37:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019f600000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:04 executing program 3: open(&(0x7f0000000000)='./file0\x00', 0x440, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x2c640, 0x0) 01:37:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:37:04 executing program 3: open(&(0x7f0000000000)='./file0\x00', 0x440, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x2c640, 0x0) 01:37:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019f700000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:04 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 01:37:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:04 executing program 3: open(&(0x7f0000000000)='./file0\x00', 0x440, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x2c640, 0x0) 01:37:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019f800000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:04 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 01:37:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, 0x10401}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:37:04 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 01:37:04 executing program 3: open(&(0x7f0000000000)='./file0\x00', 0x440, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x2c640, 0x0) 01:37:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019f900000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:04 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 01:37:04 executing program 3: request_key(&(0x7f0000000140)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0) 01:37:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:04 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/kcm\x00') 01:37:04 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 01:37:04 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 01:37:04 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$unlink(0x9, r0, r0) 01:37:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019fa00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:04 executing program 4: request_key(&(0x7f0000001380)='dns_resolver\x00', 0x0, 0x0, 0xfffffffffffffffd) 01:37:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:05 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000004c0), 0x0, &(0x7f0000000540)) [ 2170.170881][T21472] __nla_validate_parse: 41 callbacks suppressed [ 2170.170902][T21472] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 01:37:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:05 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) [ 2170.239746][T21476] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:37:05 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='io\x00') ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) 01:37:05 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 01:37:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019fb00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:05 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) 01:37:05 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/mcfilter\x00') [ 2170.421900][T21494] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:37:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:05 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 01:37:05 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={0x0}}, 0x0) 01:37:05 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) [ 2170.528183][T21497] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2170.544728][T21501] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:37:05 executing program 3: timer_create(0x3, 0x0, &(0x7f0000005280)) 01:37:05 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/rpc\x00') fchownat(r0, &(0x7f0000000000)='./file0\x00', 0xee01, 0x0, 0x0) [ 2170.688274][T21514] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:37:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019fc00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:05 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) 01:37:05 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={0x0}}, 0x0) 01:37:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x8a, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ec5304", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x8, 0xf989, "bf9cc2b8"}, @exp_fastopen={0xfe, 0x14, 0xf989, "5ab971d1aa3afe000000000000006f60"}, @generic={0x0, 0x12, "631d5cc02a21ea255d893c41928ca08a"}, @exp_fastopen={0xfe, 0xb, 0xf989, "8f0a0800000000"}, @exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) [ 2170.803179][T21519] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2170.838367][T21523] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:37:05 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) 01:37:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019fd00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) [ 2170.980386][T21534] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2171.014321][T21536] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 2171.031485][T21540] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 01:37:05 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) 01:37:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:05 executing program 4: sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x5e8f288ad1531ff2) 01:37:05 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={0x0}}, 0x0) [ 2171.085714][T21542] validate_nla: 8 callbacks suppressed [ 2171.085734][T21542] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:06 executing program 4: syz_open_dev$rtc(&(0x7f0000003380), 0x9, 0x88040) 01:37:06 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) 01:37:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000560000002500000019fe00000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000580)=@hci, 0x80, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000700)=""/33, 0x21}, {&(0x7f0000000740)=""/9, 0x9}], 0x3, &(0x7f0000000880)=""/171, 0xab}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) 01:37:06 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:37:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x0, 0x0, 0x0) 01:37:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2171.402326][T21561] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:06 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x103) open(&(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0) 01:37:06 executing program 4: open(&(0x7f00000001c0)='./file0\x00', 0x8c2, 0x0) 01:37:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190201000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:06 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:37:06 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo\x00') futimesat(r0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0xea60}}) [ 2171.648140][T21580] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:06 executing program 4: msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000004480)={{0x2, 0x0, 0x0, 0x0, 0xee00}}) getresgid(&(0x7f0000004540), &(0x7f0000004580), &(0x7f00000045c0)) 01:37:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190301000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) [ 2171.798802][ T25] audit: type=1400 audit(1644111426.607:27812): avc: denied { setattr } for pid=21583 comm="syz-executor.3" name="fdinfo" dev="proc" ino=251984 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 01:37:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:06 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo\x00') futimesat(r0, &(0x7f0000000080)='./file0\x00', 0x0) 01:37:06 executing program 4: mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000180)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee01}}) 01:37:06 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) [ 2171.902216][T21593] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:06 executing program 3: fchownat(0xffffffffffffff9c, &(0x7f0000000180)='\x00', 0xee01, 0xee01, 0x1000) 01:37:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190401000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:06 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) mount$fuseblk(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000004180)) 01:37:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:37:07 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) [ 2172.168441][T21607] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:07 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, 0x0) 01:37:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190501000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:07 executing program 3: execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x100) 01:37:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000005b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2046, 0x0) 01:37:07 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:37:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:37:07 executing program 3: pselect6(0x11, &(0x7f0000000100)={0x8}, 0x0, 0x0, 0x0, 0x0) 01:37:07 executing program 4: syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_tables_names\x00') [ 2172.493668][T21629] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190601000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:07 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) setxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='trusted.overlay.upper\x00', &(0x7f0000000300)='/dev/zero\x00', 0xa, 0x0) 01:37:07 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') 01:37:07 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:37:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="28398f53a086a5938d7b77b6fa") ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 2172.745940][T21646] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:07 executing program 4: mount$fuseblk(0x0, 0x0, 0x0, 0x79c5ce3e8e4d64c8, 0x0) 01:37:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:07 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/rpc\x00') 01:37:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190701000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:07 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_keyring_id(0x0, r0, 0x0) 01:37:07 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:37:07 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='net/anycast6\x00') 01:37:07 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0xffffffae) [ 2173.032984][T21667] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:07 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 01:37:08 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x50540, 0x0) 01:37:08 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x2, &(0x7f0000000000)=[{0x5}, {0x6}]}) 01:37:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190801000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:08 executing program 5: sched_rr_get_interval(0x0, &(0x7f00000003c0)) 01:37:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:08 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:37:08 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@abs={0x1}, 0x6e) [ 2173.360475][T21683] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:08 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r0, &(0x7f0000000340)=""/104, 0x68) 01:37:08 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_rr_get_interval(r0, &(0x7f00000001c0)) 01:37:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190901000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) [ 2173.537318][ T25] audit: type=1326 audit(1644111428.347:27813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21680 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f709d80a059 code=0x0 01:37:08 executing program 5: r0 = msgget(0x3, 0x609) r1 = getuid() r2 = syz_clone(0x2000, &(0x7f0000000000), 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="1046e73016b4cf39f4192993941cc641d2c2af434b00062be5f747df0ae2190edbf97674acdb5a79b1a38dfa7a5e65da0b02436b8d967607e34d7d9fff1ad7d92dd22a4c7349ec0dba470d07b69817e6ebb7eef64785c4684dfb61f7cb6e75f8c2911b") msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000140)={{0x0, r1, 0xee00, 0xffffffffffffffff, 0xee00, 0x3, 0xd426}, 0x0, 0x0, 0x9, 0x6, 0xffffffffffff0000, 0xff, 0x3ff, 0x7ff, 0x1f, 0x5, r2, 0xffffffffffffffff}) msgctl$IPC_STAT(0x0, 0x2, 0x0) msgctl$IPC_INFO(r0, 0x3, &(0x7f00000001c0)=""/123) 01:37:08 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_WIE_ON(r0, 0x700f) 01:37:08 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:37:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2173.646290][T21702] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:08 executing program 3: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff}) 01:37:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000003980)) 01:37:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190a01000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:08 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:37:08 executing program 3: timer_create(0x0, &(0x7f00000013c0)={0x0, 0xd, 0x0, @thr={0x0, 0x0}}, &(0x7f0000001400)) 01:37:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10000, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) 01:37:08 executing program 5: r0 = msgget(0x3, 0x609) r1 = getuid() r2 = syz_clone(0x2000, &(0x7f0000000000), 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="1046e73016b4cf39f4192993941cc641d2c2af434b00062be5f747df0ae2190edbf97674acdb5a79b1a38dfa7a5e65da0b02436b8d967607e34d7d9fff1ad7d92dd22a4c7349ec0dba470d07b69817e6ebb7eef64785c4684dfb61f7cb6e75f8c2911b") msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000140)={{0x0, r1, 0xee00, 0xffffffffffffffff, 0xee00, 0x3, 0xd426}, 0x0, 0x0, 0x9, 0x6, 0xffffffffffff0000, 0xff, 0x3ff, 0x7ff, 0x1f, 0x5, r2, 0xffffffffffffffff}) msgctl$IPC_STAT(0x0, 0x2, 0x0) msgctl$IPC_INFO(r0, 0x3, &(0x7f00000001c0)=""/123) 01:37:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 01:37:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x10, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190b01000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:08 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x2e0, 0xffffffff, 0x98, 0x198, 0x98, 0xffffffff, 0xffffffff, 0x248, 0x248, 0x248, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@empty, @ipv4=@remote}}]}, @REJECT={0x28}}, {{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'batadv_slave_1\x00', 'bond0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "cc70cc05deb6b26f0bd820c556b2011a8199edb2c02fc7d3256b08262db8"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f00000002c0), 0x10) r3 = dup(r2) sendfile(r3, r1, 0x0, 0x4000000000000081) 01:37:08 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:37:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 01:37:09 executing program 5: r0 = msgget(0x3, 0x609) r1 = getuid() r2 = syz_clone(0x2000, &(0x7f0000000000), 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="1046e73016b4cf39f4192993941cc641d2c2af434b00062be5f747df0ae2190edbf97674acdb5a79b1a38dfa7a5e65da0b02436b8d967607e34d7d9fff1ad7d92dd22a4c7349ec0dba470d07b69817e6ebb7eef64785c4684dfb61f7cb6e75f8c2911b") msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000140)={{0x0, r1, 0xee00, 0xffffffffffffffff, 0xee00, 0x3, 0xd426}, 0x0, 0x0, 0x9, 0x6, 0xffffffffffff0000, 0xff, 0x3ff, 0x7ff, 0x1f, 0x5, r2, 0xffffffffffffffff}) msgctl$IPC_STAT(0x0, 0x2, 0x0) msgctl$IPC_INFO(r0, 0x3, &(0x7f00000001c0)=""/123) 01:37:09 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r0, &(0x7f0000003680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 01:37:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190c01000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x10, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:09 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) 01:37:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 01:37:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190d01000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:09 executing program 5: r0 = msgget(0x3, 0x609) r1 = getuid() r2 = syz_clone(0x2000, &(0x7f0000000000), 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="1046e73016b4cf39f4192993941cc641d2c2af434b00062be5f747df0ae2190edbf97674acdb5a79b1a38dfa7a5e65da0b02436b8d967607e34d7d9fff1ad7d92dd22a4c7349ec0dba470d07b69817e6ebb7eef64785c4684dfb61f7cb6e75f8c2911b") msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000140)={{0x0, r1, 0xee00, 0xffffffffffffffff, 0xee00, 0x3, 0xd426}, 0x0, 0x0, 0x9, 0x6, 0xffffffffffff0000, 0xff, 0x3ff, 0x7ff, 0x1f, 0x5, r2, 0xffffffffffffffff}) msgctl$IPC_STAT(0x0, 0x2, 0x0) msgctl$IPC_INFO(r0, 0x3, &(0x7f00000001c0)=""/123) 01:37:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 01:37:09 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}]}, 0x30}}, 0x0) 01:37:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x10, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190e01000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:09 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='&/%\'.\x00', r0) 01:37:10 executing program 4: open$dir(0x0, 0x440000, 0x0) 01:37:10 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-160\x00'}, 0x58) 01:37:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190f01000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:10 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}]}, 0x30}}, 0x0) 01:37:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:10 executing program 5: socket$inet(0x2, 0x0, 0x10000) 01:37:10 executing program 5: mknodat$null(0xffffffffffffffff, &(0x7f00000009c0)='\x00', 0x0, 0x103) 01:37:10 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') write$P9_RFSYNC(r0, 0x0, 0x0) [ 2175.303792][T21786] __nla_validate_parse: 43 callbacks suppressed 01:37:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001280)={'bond_slave_0\x00'}) [ 2175.364884][T21786] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:37:10 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/vlan/config\x00') 01:37:10 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rpc\x00') unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x0) [ 2175.453019][T21787] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:37:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000191001000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) [ 2175.513600][T21792] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 01:37:10 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0xf}, {0x4}}]}, 0x30}}, 0x0) 01:37:10 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$revoke(0x3, r1) 01:37:10 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000080)) 01:37:10 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_LSEEK(r0, 0x0, 0xffffffffffffff23) [ 2175.670416][T21811] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:37:10 executing program 5: msgsnd(0x0, &(0x7f0000000080)={0x2, "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"}, 0xfd1, 0x0) 01:37:10 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x103) open(&(0x7f0000000080)='./file0\x00', 0x300, 0x0) 01:37:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000191101000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) [ 2175.796359][T21813] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:37:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x38}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:10 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') [ 2175.861777][T21820] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 01:37:10 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) 01:37:10 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x103) [ 2175.936246][T21830] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:37:10 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') 01:37:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000191201000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) [ 2176.087668][T21834] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:37:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:10 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) 01:37:10 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') [ 2176.150738][T21839] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2176.214307][T21841] validate_nla: 8 callbacks suppressed [ 2176.214326][T21841] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2176.262204][T21841] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:37:11 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 01:37:11 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) 01:37:11 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') 01:37:11 executing program 3: pipe2$9p(&(0x7f0000004500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATu(r0, &(0x7f0000004600)={0x4d, 0x7d, 0x0, {{0x0, 0x37, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '^', 0x1, '/', 0x1, ':', 0x1, '!'}, 0x1, '&'}}, 0x4d) write$P9_RSTATu(r0, &(0x7f0000000300)={0x62, 0x7d, 0x0, {{0x0, 0x41, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00\x00', 0x8, '-/\'\\)\\(!', 0x4, '!,$\x00'}, 0xc, '#/+{[$-!,.,#', 0x0, 0x0, 0xffffffffffffffff}}, 0x62) 01:37:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000191301000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2176.742308][T21856] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000fc0)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) 01:37:11 executing program 4: readlinkat(0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=""/62, 0x3e) 01:37:11 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7800000024000b0e2cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00001f00ffffffff000000000d0001006671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) 01:37:11 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') 01:37:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000191401000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:11 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x103) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 01:37:11 executing program 3: mknodat$loop(0xffffffffffffff9c, 0x0, 0xdb40daecf0833310, 0x0) 01:37:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2176.956806][T21872] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:11 executing program 5: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000011c0)={0x77359400}) 01:37:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000191501000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:11 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000280)='rxrpc\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, r1) 01:37:11 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x103) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=@OVL_FILEID_V0={0x15, 0xfb, {0x0, 0xfb, 0x15, 0x0, 0x0, "41897b72b51cf4f170f25775533e87ba"}}, &(0x7f0000000080), 0x0) 01:37:11 executing program 0: clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000240), &(0x7f00000002c0)={0x0, r0+60000000}, &(0x7f0000000340)={0x0}) 01:37:12 executing program 3: timer_create(0x2, &(0x7f0000000000)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000040)) [ 2177.160044][T21886] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:12 executing program 4: pipe2$9p(0x0, 0x93fe269c2da58dca) 01:37:12 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000740)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) 01:37:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000191601000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:12 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') 01:37:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(r0, &(0x7f00000017c0)={0x2020}, 0x2020) 01:37:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:12 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='smaps\x00') 01:37:12 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180), 0x20000000000, 0x402) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f00000001c0)) [ 2177.321260][T21899] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:12 executing program 0: keyctl$negate(0xd, 0x0, 0x0, 0xfffffffffffffff9) 01:37:12 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000040), 0x4) 01:37:12 executing program 4: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x410002, 0x0) 01:37:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000191701000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:12 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') [ 2177.496254][T21902] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 01:37:12 executing program 5: msgsnd(0x0, &(0x7f0000000080), 0x8, 0x0) 01:37:12 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='uid_map\x00') write$FUSE_LSEEK(r0, 0x0, 0x0) [ 2177.627207][T21921] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:12 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/config\x00') read$char_usb(r0, &(0x7f0000000140)=""/185, 0xb9) 01:37:13 executing program 3: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) 01:37:13 executing program 4: pipe2$9p(&(0x7f0000004500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000080)={0x17, 0x7, 0x0, {{0xa, '/dev/zero\x00'}}}, 0xfffffffffffffe4f) 01:37:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:13 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$describe(0x6, r0, &(0x7f0000000080)=""/109, 0x6d) 01:37:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000191801000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:13 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/config\x00') read$char_usb(r0, &(0x7f0000000140)=""/185, 0xb9) [ 2178.288729][T21933] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:13 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 01:37:13 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/config\x00') read$char_usb(r0, &(0x7f0000000140)=""/185, 0xb9) 01:37:13 executing program 4: socket(0x11, 0x3, 0x0) pselect6(0x40, &(0x7f0000000100)={0x8}, 0x0, 0x0, 0x0, 0x0) 01:37:13 executing program 3: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) [ 2178.376263][T21937] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 01:37:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000191901000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:13 executing program 5: syz_clone(0x3024400, 0x0, 0x0, 0x0, 0x0, 0x0) 01:37:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x1, 0x0, '\x00', 0x6}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:13 executing program 3: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) 01:37:13 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/config\x00') read$char_usb(r0, &(0x7f0000000140)=""/185, 0xb9) [ 2178.541810][T21954] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:13 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000001240)='net/icmp\x00') 01:37:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000191a01000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:13 executing program 3: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) [ 2178.668761][T21957] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 01:37:13 executing program 5: syz_clone(0x3024400, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 01:37:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)={0x24, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}]}]}, 0x24}], 0x1}, 0x0) [ 2178.797351][T21970] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:14 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='net/nf_conntrack_expect\x00') 01:37:14 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f00000067c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) 01:37:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}, {}, {0x0, 0x0, 0x0, '\x00', 0x6}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000191b01000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:14 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x103) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) 01:37:14 executing program 5: clock_getres(0xd42eb69dcdc06750, 0x0) 01:37:14 executing program 3: pipe2$9p(&(0x7f0000004500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) utimensat(r0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x2710}}, 0x0) 01:37:14 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 01:37:14 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) [ 2179.377276][T21985] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000191c01000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:14 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x103) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0xee00, 0x0) 01:37:14 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/rpc\x00') read$FUSE(r0, 0x0, 0x0) [ 2179.485940][T21987] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 01:37:14 executing program 4: keyctl$link(0x8, 0x0, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:37:14 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 01:37:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:14 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x103) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0xee00, 0x0) 01:37:14 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r0) 01:37:14 executing program 3: r0 = semget(0x0, 0x0, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) semtimedop(r0, &(0x7f0000000380)=[{0x0, 0x7f}], 0x1, &(0x7f0000000400)) 01:37:14 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 01:37:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000191d01000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:14 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x103) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0xee00, 0x0) 01:37:14 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) 01:37:14 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 01:37:14 executing program 3: open$dir(&(0x7f0000000000)='./file0\x00', 0x101040, 0x0) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.impure\x00') 01:37:14 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) set_mempolicy(0x2, &(0x7f0000000300)=0xf21d, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) write$FUSE_ATTR(r0, &(0x7f0000000180)={0x78}, 0x78) 01:37:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000191e01000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:14 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x11, &(0x7f0000000100)={0x8}, 0x0, 0x0, 0x0, 0x0) 01:37:14 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x103) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0xee00, 0x0) 01:37:14 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='net/softnet_stat\x00') 01:37:14 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) set_mempolicy(0x2, &(0x7f0000000300)=0xf21d, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) write$FUSE_ATTR(r0, &(0x7f0000000180)={0x78}, 0x78) 01:37:14 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='io\x00') ioctl$BLKGETSIZE(r0, 0x1260, 0x0) 01:37:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(r0, 0x0, 0x0) 01:37:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000191f01000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:15 executing program 0: request_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='-\\-!\x00', 0xfffffffffffffffe) 01:37:15 executing program 5: open(&(0x7f0000000000)='./file0\x00', 0x80500, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 01:37:15 executing program 3: msgctl$IPC_INFO(0x0, 0x3, 0x0) syz_clone(0x22880000, 0x0, 0x0, 0x0, 0x0, 0x0) 01:37:15 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) set_mempolicy(0x2, &(0x7f0000000300)=0xf21d, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) write$FUSE_ATTR(r0, &(0x7f0000000180)={0x78}, 0x78) 01:37:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}, {}, {}, {0x0, 0x20}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:15 executing program 0: clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0)={0x3efc5d5a}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000002c0)={0x0, r0+60000000}, &(0x7f0000000340)={&(0x7f0000000300)={[0x9]}, 0x8}) 01:37:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000192001000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:15 executing program 5: syz_clone(0x40040080, 0x0, 0x0, 0x0, 0x0, 0x0) 01:37:15 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) set_mempolicy(0x2, &(0x7f0000000300)=0xf21d, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) write$FUSE_ATTR(r0, &(0x7f0000000180)={0x78}, 0x78) 01:37:15 executing program 0: add_key$keyring(&(0x7f0000001580), 0x0, 0x0, 0x0, 0xfffffffffffffffa) 01:37:15 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x10540, 0x0) [ 2180.450246][T22067] __nla_validate_parse: 17 callbacks suppressed [ 2180.450266][T22067] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2180.506255][T22064] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 01:37:15 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) read$FUSE(r0, 0x0, 0x0) 01:37:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000080)) [ 2180.612870][T22069] lo speed is unknown, defaulting to 1000 01:37:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000192101000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}, {}, {0x0, 0x0, 0x0, '\x00', 0xf8}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:15 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x103) linkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 01:37:15 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) utimensat(r0, 0x0, 0x0, 0x0) 01:37:15 executing program 0: r0 = syz_open_dev$rtc(&(0x7f0000000240), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000280)={0x0, 0x0, 0x2}) [ 2180.763664][T22082] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:37:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000001700)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x1, 0x0) [ 2180.810077][T22083] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 01:37:16 executing program 5: syz_clone(0x40040080, 0x0, 0x0, 0x0, 0x0, 0x0) 01:37:16 executing program 3: pipe2$9p(&(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RREMOVE(r0, &(0x7f0000001140)={0x7}, 0x7) 01:37:16 executing program 0: r0 = syz_open_dev$rtc(&(0x7f0000000240), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000280)={0x0, 0x0, 0x2}) 01:37:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000192201000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:16 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) accept(r0, 0x0, 0x0) 01:37:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:16 executing program 4: msgrcv(0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0) 01:37:16 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='syscall\x00') r0 = syz_clone(0xc8085000, &(0x7f0000000000), 0x0, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)="a46e56ef4a1720adf54b17e026060eb65d8a077e") r1 = syz_open_procfs(r0, &(0x7f0000000140)='attr/current\x00') bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r1, r1}, 0xc) 01:37:16 executing program 0: r0 = syz_open_dev$rtc(&(0x7f0000000240), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000280)={0x0, 0x0, 0x2}) [ 2181.238790][T22100] validate_nla: 6 callbacks suppressed [ 2181.238811][T22100] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2181.278306][T22100] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:37:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000192301000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:16 executing program 0: r0 = syz_open_dev$rtc(&(0x7f0000000240), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000280)={0x0, 0x0, 0x2}) 01:37:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0xff, 0x0, '\x00', 0x8}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2181.443167][T22107] lo speed is unknown, defaulting to 1000 [ 2181.502196][T22116] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2181.568612][T22116] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2181.592869][T22118] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2181.806849][T22112] lo speed is unknown, defaulting to 1000 01:37:17 executing program 5: syz_clone(0x40040080, 0x0, 0x0, 0x0, 0x0, 0x0) 01:37:17 executing program 0: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc000, 0x0) 01:37:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000192401000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:17 executing program 4: syz_open_dev$loop(&(0x7f0000000000), 0x7fff, 0x0) [ 2182.237767][T22127] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:17 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') [ 2182.284225][T22127] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:37:17 executing program 4: syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)={[], [{@dont_hash}]}) [ 2182.353946][T22129] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2182.429243][T22133] lo speed is unknown, defaulting to 1000 01:37:17 executing program 3: syz_io_uring_setup(0x4a54, &(0x7f0000000580), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x7ff, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 01:37:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000192501000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:17 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x16, 0x0, 0x0) 01:37:17 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendto$packet(r0, 0x0, 0xfffffffffffffdc5, 0x0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 01:37:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2182.760579][T22146] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2182.790450][T22146] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:37:18 executing program 5: syz_clone(0x40040080, 0x0, 0x0, 0x0, 0x0, 0x0) 01:37:18 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000004180)) read$FUSE(r0, &(0x7f0000005580)={0x2020}, 0x2020) 01:37:18 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/raw6\x00') 01:37:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001640), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001fc0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) 01:37:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000192601000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 01:37:18 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) clock_gettime(0x0, &(0x7f0000000040)) [ 2183.246015][T22162] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:18 executing program 3: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000140)) [ 2183.307113][T22165] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:37:18 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0x3}, 0x1c) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) dup2(r0, r1) sendto$inet6(r1, &(0x7f0000000040)="d5", 0x1, 0x0, &(0x7f00000000c0)={0x1c, 0x1c, 0x1}, 0x1c) 01:37:18 executing program 3: r0 = socket(0x11, 0x3, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000), 0x4) 01:37:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x8a, '\x00', 0x1f}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2183.458139][T22171] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2183.516284][T22167] lo speed is unknown, defaulting to 1000 01:37:19 executing program 0: bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff, 0xe}, 0x10) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ec0)=[{&(0x7f0000000e00)="f6", 0x1}], 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) 01:37:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000192701000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:19 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$hidraw(r0, 0x0, 0x0) 01:37:19 executing program 4: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0, 0x0, 0x18}, 0x10) 01:37:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x0, '\x00', 0x1f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:19 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f00000005c0)='y', 0x1}], 0x2}, 0x0) [ 2184.334606][T22190] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:19 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @multicast}, 0x10) 01:37:19 executing program 5: syz_open_dev$loop(&(0x7f0000000040), 0x9, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x80) 01:37:19 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 2184.395224][T22190] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:37:19 executing program 3: mremap(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1000, 0x0, &(0x7f0000ff3000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000fef000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000) 01:37:19 executing program 5: r0 = socket(0x2, 0x2, 0x0) r1 = socket(0x2, 0x1, 0x0) dup2(r1, r0) shutdown(r0, 0x1) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) 01:37:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {0x0, 0x0, 0x0, '\x00', 0x1f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000192801000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:19 executing program 3: mremap(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1000, 0x0, &(0x7f0000ff3000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000fef000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000) [ 2184.599639][T22203] device batadv_slave_1 entered promiscuous mode [ 2184.626601][T22202] device batadv_slave_1 left promiscuous mode 01:37:19 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 01:37:19 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @multicast}, 0x10) [ 2184.715411][T22212] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:19 executing program 3: mremap(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1000, 0x0, &(0x7f0000ff3000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000fef000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000) [ 2184.772710][T22213] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2184.776053][T22219] device batadv_slave_1 entered promiscuous mode 01:37:19 executing program 5: r0 = epoll_create1(0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000002140)={0x20002009}) [ 2184.816800][T22212] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:37:19 executing program 3: mremap(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1000, 0x0, &(0x7f0000ff3000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000fef000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000) 01:37:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2184.913631][T22216] device batadv_slave_1 left promiscuous mode [ 2185.036425][T22227] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 01:37:20 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000340), 0x0, 0x2) write$evdev(r0, 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000200)=""/153) clock_getres(0x7, &(0x7f0000000080)) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x1, 0x55d}], 0x18) 01:37:20 executing program 5: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000100)=[{}], 0x1, 0x10001) r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) 01:37:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000192901000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:20 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000700)=@un=@abs={0x8}, 0x8) 01:37:20 executing program 3: mremap(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1000, 0x0, &(0x7f0000ff3000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000fef000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x2000)=nil, 0x0) mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000) 01:37:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:20 executing program 3: mremap(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1000, 0x0, &(0x7f0000ff3000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000fef000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x2000)=nil, 0x0) mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000) [ 2185.456879][T22241] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:20 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB='`\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=r1], 0x60) 01:37:20 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r1, r0, 0x0, 0x61c2c9d9) [ 2185.521528][T22241] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2185.521979][T22238] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 01:37:20 executing program 0: unshare(0x42060400) unshare(0x40000) times(&(0x7f0000000000)) bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x1, @empty}}, 0x1e) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000000c0)={0x440, 0x3f4, 0x300, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x31, [0x1, 0x6, 0x3, 0x0, 0x80000001, 0x5, 0x1, 0x4, 0x842, 0x6000000, 0x8001, 0x7d0, 0x7, 0xff, 0x1, 0xd3c0000, 0x0, 0x1, 0xd9a2, 0xfa91, 0x100, 0x0, 0x3, 0x2, 0x7, 0xdb8, 0x9, 0x8, 0x7fffffff, 0x0, 0x800, 0x9, 0x9, 0x4, 0x2, 0x5, 0x7, 0x6, 0x18, 0x3, 0x4, 0x8, 0x5, 0x8000, 0xfffffff7, 0x5, 0x0, 0x6fa, 0xfffffffc, 0xffffffff, 0x3, 0x7, 0x1, 0xf68, 0x7, 0x5, 0x675, 0x200, 0x7, 0x0, 0x2, 0x89e4, 0x25], [0x0, 0x7f, 0xffffffff, 0xffffffff, 0x1b62, 0x4, 0x8, 0x5, 0x0, 0xa5, 0x0, 0x3f, 0xfffffffc, 0x0, 0xff, 0x800, 0xcb2, 0x2, 0x80, 0x8000, 0xfff, 0xbea0, 0x7f, 0x3, 0x6, 0x0, 0x20, 0x28, 0x0, 0xfffffffd, 0xfffffff8, 0x0, 0xffff, 0xf453, 0x9, 0x80, 0xda03, 0xff, 0x50, 0x4, 0x2, 0x0, 0x2, 0x100, 0x6, 0x9, 0x1, 0x3ff, 0x0, 0x0, 0x8, 0x9, 0xa4, 0x5, 0x200, 0x1, 0x40, 0x89d4, 0x9, 0x3, 0xf36, 0x5, 0x9], [0x9, 0x1d, 0x833a, 0x9, 0x69458f05, 0xfffff000, 0x3, 0x1000, 0x3, 0x0, 0xffff0000, 0xe4ce, 0x4, 0x4, 0xffff2e8b, 0x800, 0x24135176, 0xebe, 0x7, 0x0, 0x1ff, 0x1, 0xf868, 0x7, 0x7, 0xaf, 0x6, 0xffffffff, 0x800, 0xd10, 0x3, 0x3, 0xffffffc1, 0x77, 0x8, 0x40, 0x100, 0x10000, 0x0, 0x4, 0x252, 0xfbf1, 0x101, 0x3, 0x80, 0x458c, 0x1, 0xd6f2, 0xfffffffa, 0x7fffffff, 0x4d, 0x3, 0x1, 0x9, 0x7, 0x8001, 0x9, 0x98, 0x3, 0x80000001, 0x8, 0x1, 0x7e9, 0x40], [0x63, 0x62f, 0x401, 0x1a22, 0x5, 0xffffffc0, 0x7, 0x7, 0x7fffffff, 0xfffffffa, 0x40, 0x8, 0x0, 0x4, 0x2, 0xffff, 0x40, 0x81, 0xe4, 0xc0000, 0xcc5, 0x4, 0x5, 0x3, 0x1, 0x1, 0x18, 0x4, 0xffffffff, 0x5, 0x5, 0x1f7c4db8, 0x80000001, 0x8, 0x3, 0xffff, 0x0, 0x3, 0x20, 0xffff, 0x1, 0x6, 0x19437cb8, 0x3c, 0x1, 0x1000, 0x6, 0x5, 0x3, 0x740d, 0x7e, 0xa4, 0x0, 0xc7, 0x8, 0x2, 0x9, 0x0, 0x20, 0xfffffffe, 0x79a, 0x3, 0x7, 0x100], 0x1e, ['\xbd-\x00', '-:^\xd6\\\\]::)@\\)\\\'}\x00', '\x00', '!^{][:\x00', '%\x00']}, ["", "", ""]}, 0x440}, 0x1, 0x0, 0x0, 0x400c040}, 0x40) syz_genetlink_get_family_id$fou(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x4000) openat$full(0xffffffffffffff9c, &(0x7f0000000700), 0x8042, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000009c0)={0x800, "3bef98"}, 0x6) 01:37:20 executing program 3: mremap(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1000, 0x0, &(0x7f0000ff3000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000fef000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x2000)=nil, 0x0) mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000) 01:37:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000192a01000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:20 executing program 5: times(&(0x7f0000000000)) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) 01:37:20 executing program 3: mremap(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1000, 0x0, &(0x7f0000ff3000/0x1000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000fef000/0x3000)=nil) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000) 01:37:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2185.784766][T22255] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=12163 sclass=netlink_audit_socket pid=22255 comm=syz-executor.4 [ 2185.786618][T22256] lo speed is unknown, defaulting to 1000 [ 2185.821899][T22261] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2185.836044][T22255] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=9032 sclass=netlink_audit_socket pid=22255 comm=syz-executor.4 [ 2185.867057][T22261] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:37:20 executing program 3: mremap(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1000, 0x0, &(0x7f0000ff3000/0x1000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000fef000/0x3000)=nil) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000) 01:37:20 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/pm_test', 0x0, 0x0) read$ptp(r0, &(0x7f0000001480)=""/4086, 0xfffffffffffffe39) [ 2185.900880][T22255] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33608 sclass=netlink_audit_socket pid=22255 comm=syz-executor.4 [ 2185.953100][T22255] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=3942 sclass=netlink_audit_socket pid=22255 comm=syz-executor.4 [ 2186.002042][T22255] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35661 sclass=netlink_audit_socket pid=22255 comm=syz-executor.4 01:37:20 executing program 3: mremap(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1000, 0x0, &(0x7f0000ff3000/0x1000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000fef000/0x3000)=nil) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000) 01:37:20 executing program 5: io_setup(0x1091, &(0x7f00000001c0)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) 01:37:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000192b01000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) [ 2186.078371][T22255] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=256 sclass=netlink_audit_socket pid=22255 comm=syz-executor.4 [ 2186.174507][T22255] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19456 sclass=netlink_audit_socket pid=22255 comm=syz-executor.4 [ 2186.190396][T22277] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2186.217359][T22255] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=34125 sclass=netlink_audit_socket pid=22255 comm=syz-executor.4 [ 2186.259807][T22280] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2186.282244][T22255] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=50 sclass=netlink_audit_socket pid=22255 comm=syz-executor.4 [ 2186.324966][T22255] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=22255 comm=syz-executor.4 01:37:21 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r1, r0, 0x0, 0x61c2c9d9) 01:37:23 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x5, &(0x7f0000000000), 0x4) 01:37:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {0x20}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:23 executing program 3: mremap(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1000, 0x0, &(0x7f0000ff3000/0x1000)=nil) shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000) 01:37:23 executing program 5: prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffb000/0x2000)=nil) 01:37:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000192c01000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:23 executing program 4: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000, 0x0) open$dir(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) select(0x40, &(0x7f0000000040), &(0x7f00000000c0)={0x9}, 0x0, 0x0) 01:37:23 executing program 3: mremap(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1000, 0x0, &(0x7f0000ff3000/0x1000)=nil) shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000) [ 2189.022444][T22288] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:23 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RNDZAPENTCNT(r0, 0xc0045878, 0x0) 01:37:23 executing program 5: socket(0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xc) [ 2189.096804][T22288] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:37:24 executing program 0: sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000580)=[{{&(0x7f0000000000)=@sco={0x1f, @none}, 0x80, 0x0}}], 0x1, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)) creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) 01:37:24 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000040), 0x77b, 0x4000040) 01:37:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000192d01000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:24 executing program 3: mremap(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1000, 0x0, &(0x7f0000ff3000/0x1000)=nil) shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000) 01:37:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x2}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:24 executing program 5: io_setup(0x101, &(0x7f0000000000)) io_setup(0xff, &(0x7f0000000040)=0x0) io_setup(0x9, &(0x7f0000000cc0)=0x0) io_destroy(r1) io_destroy(r0) 01:37:24 executing program 0: unshare(0x42060400) unshare(0x40000) times(&(0x7f0000000000)) bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x1, @empty}}, 0x1e) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000000c0)={0x440, 0x3f4, 0x300, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x31, [0x1, 0x6, 0x3, 0x0, 0x80000001, 0x5, 0x1, 0x4, 0x842, 0x6000000, 0x8001, 0x7d0, 0x7, 0xff, 0x1, 0xd3c0000, 0x0, 0x1, 0xd9a2, 0xfa91, 0x100, 0x0, 0x3, 0x2, 0x7, 0xdb8, 0x9, 0x8, 0x7fffffff, 0x0, 0x800, 0x9, 0x9, 0x4, 0x2, 0x5, 0x7, 0x6, 0x18, 0x3, 0x0, 0x8, 0x0, 0x8000, 0xfffffff7, 0x5, 0x0, 0x6fa, 0xfffffffc, 0xffffffff, 0x3, 0x7, 0x1, 0xf68, 0x7, 0x5, 0x675, 0x200, 0x7, 0x0, 0x2, 0x89e4, 0x25, 0x6e], [0x0, 0x7f, 0xffffffff, 0xffffffff, 0x1b62, 0x4, 0x8, 0x5, 0x0, 0xa5, 0x0, 0x3f, 0xfffffffc, 0x0, 0xff, 0x800, 0xcb2, 0x2, 0x80, 0x8000, 0xfff, 0xbea0, 0x7f, 0x3, 0x6, 0x0, 0x20, 0x28, 0x0, 0xfffffffd, 0xfffffff8, 0x0, 0xffff, 0xf453, 0x9, 0x80, 0xda03, 0xff, 0x50, 0x4, 0x2, 0x0, 0x2, 0x100, 0x6, 0x9, 0x1, 0x3ff, 0x0, 0x0, 0x8, 0x9, 0xa4, 0x5, 0x200, 0x1, 0x40, 0x89d4, 0x9, 0x3, 0xf36, 0x5, 0x9], [0x9, 0x1d, 0x833a, 0x9, 0x69458f05, 0xfffff000, 0x3, 0x1000, 0x3, 0x0, 0xffff0000, 0xe4ce, 0x4, 0x4, 0xffff2e8b, 0x800, 0x24135176, 0xebe, 0x7, 0x0, 0x1ff, 0x1, 0xf868, 0x7, 0x7, 0xaf, 0x6, 0xffffffff, 0x800, 0xd10, 0x3, 0x3, 0xffffffc1, 0x77, 0x8, 0x40, 0x100, 0x10000, 0x0, 0x4, 0x252, 0xfbf1, 0x101, 0x3, 0x80, 0x458c, 0x1, 0xd6f2, 0xfffffffa, 0x7fffffff, 0x4d, 0x3, 0x1, 0x9, 0x7, 0x8001, 0x9, 0x98, 0x3, 0x80000001, 0x8, 0x1, 0x7e9, 0x40], [0x63, 0x62f, 0x401, 0x1a22, 0x5, 0xffffffc0, 0x7, 0x7, 0x7fffffff, 0xfffffffa, 0x40, 0x8, 0x0, 0x4, 0x2, 0xffff, 0x40, 0x81, 0xe4, 0xc0000, 0xcc5, 0x4, 0x5, 0x3, 0x1, 0x1, 0x18, 0x4, 0xffffffff, 0x5, 0x5, 0x1f7c4db8, 0x80000001, 0x8, 0x3, 0xffff, 0x0, 0x3, 0x20, 0xffff, 0x1, 0x6, 0x19437cb8, 0x3c, 0x1, 0x1000, 0x6, 0x5, 0x3, 0x740d, 0x7e, 0xa4, 0x0, 0xc7, 0x8, 0x2, 0x9, 0x0, 0x20, 0xfffffffe, 0x79a, 0x3, 0x7, 0x100], 0x1e, ['\xbd-\x00', '-:^\xd6\\\\]::)@\\)\\\'}\x00', '\x00', '!^{][:\x00', '%\x00']}, ["", "", ""]}, 0x440}, 0x1, 0x0, 0x0, 0x400c040}, 0x40) syz_genetlink_get_family_id$fou(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x4000) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000009c0)={0x800, "3bef98"}, 0x6) [ 2189.334826][T22308] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2189.351193][ T25] audit: type=1804 audit(1644111444.157:27814): pid=22310 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm=1F name="/root/syzkaller-testdir2238175931/syzkaller.qAsjhA/1525/bus" dev="sda1" ino=1179 res=1 errno=0 01:37:24 executing program 3: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000fef000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000) [ 2189.435552][T22308] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2189.505919][T22320] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 01:37:24 executing program 4: syz_emit_ethernet(0xa6, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600700be00703afffe8000000000000000000000000000aafe80"], 0x0) 01:37:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000192e01000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:24 executing program 3: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000fef000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000) [ 2189.592772][T22322] lo speed is unknown, defaulting to 1000 01:37:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x2}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:24 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000240)=""/217, 0xd9}], 0x1, 0x40, 0x0) 01:37:24 executing program 3: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000fef000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000) [ 2189.673118][T22331] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2189.706501][T22331] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:37:24 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f00000000c0)=@isdn, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/234}, {&(0x7f0000000280)=""/37}, {&(0x7f00000002c0)=""/51}, {&(0x7f0000000300)=""/75}], 0x0, &(0x7f0000000480)=""/79}}], 0x40000000000021d, 0x20140, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) [ 2189.795030][T22334] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 01:37:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000192f01000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:24 executing program 3: mremap(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1000, 0x0, &(0x7f0000ff3000/0x1000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000fef000/0x3000)=nil) shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000) 01:37:24 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000240)=""/217, 0xd9}], 0x1, 0x40, 0x0) [ 2189.972558][T22345] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2190.016681][T22345] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:37:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:25 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000240)=""/217, 0xd9}], 0x1, 0x0, 0x0) dup3(r0, r1, 0x0) 01:37:25 executing program 3: mremap(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1000, 0x0, &(0x7f0000ff3000/0x1000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000fef000/0x3000)=nil) shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000) 01:37:25 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000240)=""/217, 0xd9}], 0x1, 0x40, 0x0) 01:37:25 executing program 0: unshare(0x42060400) unshare(0x40000) times(&(0x7f0000000000)) bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x1, @empty}}, 0x1e) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000000c0)={0x440, 0x3f4, 0x300, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x31, [0x1, 0x6, 0x3, 0x0, 0x80000001, 0x5, 0x1, 0x4, 0x842, 0x6000000, 0x8001, 0x7d0, 0x7, 0xff, 0x1, 0xd3c0000, 0x0, 0x1, 0xd9a2, 0xfa91, 0x100, 0x0, 0x3, 0x2, 0x7, 0xdb8, 0x9, 0x8, 0x7fffffff, 0x0, 0x800, 0x9, 0x9, 0x4, 0x2, 0x5, 0x7, 0x6, 0x18, 0x3, 0x0, 0x8, 0x0, 0x8000, 0xfffffff7, 0x5, 0x0, 0x6fa, 0xfffffffc, 0xffffffff, 0x3, 0x7, 0x1, 0xf68, 0x7, 0x5, 0x675, 0x200, 0x7, 0x0, 0x2, 0x89e4, 0x25, 0x6e], [0x0, 0x7f, 0xffffffff, 0xffffffff, 0x1b62, 0x4, 0x8, 0x5, 0x0, 0xa5, 0x0, 0x3f, 0xfffffffc, 0x0, 0xff, 0x800, 0xcb2, 0x2, 0x80, 0x8000, 0xfff, 0xbea0, 0x7f, 0x3, 0x6, 0x0, 0x20, 0x28, 0x0, 0xfffffffd, 0xfffffff8, 0x0, 0xffff, 0xf453, 0x9, 0x80, 0xda03, 0xff, 0x50, 0x4, 0x2, 0x0, 0x2, 0x100, 0x6, 0x9, 0x1, 0x3ff, 0x0, 0x0, 0x8, 0x9, 0xa4, 0x5, 0x200, 0x1, 0x40, 0x89d4, 0x9, 0x3, 0xf36, 0x5, 0x9], [0x9, 0x1d, 0x833a, 0x9, 0x69458f05, 0xfffff000, 0x3, 0x1000, 0x3, 0x0, 0xffff0000, 0xe4ce, 0x4, 0x4, 0xffff2e8b, 0x800, 0x24135176, 0xebe, 0x7, 0x0, 0x1ff, 0x1, 0xf868, 0x7, 0x7, 0xaf, 0x6, 0xffffffff, 0x800, 0xd10, 0x3, 0x3, 0xffffffc1, 0x77, 0x8, 0x40, 0x100, 0x10000, 0x0, 0x4, 0x252, 0xfbf1, 0x101, 0x3, 0x80, 0x458c, 0x1, 0xd6f2, 0xfffffffa, 0x7fffffff, 0x4d, 0x3, 0x1, 0x9, 0x7, 0x8001, 0x9, 0x98, 0x3, 0x80000001, 0x8, 0x1, 0x7e9, 0x40], [0x63, 0x62f, 0x401, 0x1a22, 0x5, 0xffffffc0, 0x7, 0x7, 0x7fffffff, 0xfffffffa, 0x40, 0x8, 0x0, 0x4, 0x2, 0xffff, 0x40, 0x81, 0xe4, 0xc0000, 0xcc5, 0x4, 0x5, 0x3, 0x1, 0x1, 0x18, 0x4, 0xffffffff, 0x5, 0x5, 0x1f7c4db8, 0x80000001, 0x8, 0x3, 0xffff, 0x0, 0x3, 0x20, 0xffff, 0x1, 0x6, 0x19437cb8, 0x3c, 0x1, 0x1000, 0x6, 0x5, 0x3, 0x740d, 0x7e, 0xa4, 0x0, 0xc7, 0x8, 0x2, 0x9, 0x0, 0x20, 0xfffffffe, 0x79a, 0x3, 0x7, 0x100], 0x1e, ['\xbd-\x00', '-:^\xd6\\\\]::)@\\)\\\'}\x00', '\x00', '!^{][:\x00', '%\x00']}, ["", "", ""]}, 0x440}, 0x1, 0x0, 0x0, 0x400c040}, 0x40) syz_genetlink_get_family_id$fou(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x4000) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000009c0)={0x800, "3bef98"}, 0x6) 01:37:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000193001000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) [ 2190.436530][T22355] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:25 executing program 3: mremap(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1000, 0x0, &(0x7f0000ff3000/0x1000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000fef000/0x3000)=nil) shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000) 01:37:25 executing program 5: unshare(0x42060400) unshare(0x40000) times(&(0x7f0000000000)) bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x1, @empty}}, 0x1e) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000000c0)={0x440, 0x3f4, 0x300, 0x70bd2b, 0x25dfdbfd, {0x1, 0x0, 0x31, [0x1, 0x6, 0x3, 0x0, 0x80000001, 0x5, 0x1, 0x4, 0x842, 0x6000000, 0x8001, 0x7d0, 0x7, 0xff, 0x1, 0xd3c0000, 0x0, 0x1, 0xd9a2, 0xfa91, 0x100, 0x0, 0x3, 0x2, 0x7, 0xdb8, 0x9, 0x8, 0x7fffffff, 0x0, 0x800, 0x9, 0x9, 0x4, 0x2, 0x5, 0x7, 0x6, 0x18, 0x3, 0x0, 0x8, 0x0, 0x8000, 0xfffffff7, 0x5, 0x0, 0x6fa, 0xfffffffc, 0xffffffff, 0x3, 0x7, 0x1, 0xf68, 0x7, 0x5, 0x675, 0x200, 0x7, 0x0, 0x2, 0x89e4, 0x25, 0x6e], [0x0, 0x7f, 0xffffffff, 0xffffffff, 0x1b62, 0x4, 0x8, 0x5, 0x0, 0xa5, 0x0, 0x3f, 0xfffffffc, 0x0, 0xff, 0x800, 0xcb2, 0x2, 0x80, 0x8000, 0xfff, 0xbea0, 0x7f, 0x3, 0x6, 0x0, 0x20, 0x28, 0x0, 0xfffffffd, 0xfffffff8, 0x0, 0xffff, 0xf453, 0x9, 0x80, 0xda03, 0xff, 0x50, 0x4, 0x2, 0x0, 0x2, 0x100, 0x6, 0x9, 0x1, 0x3ff, 0x0, 0x0, 0x8, 0x9, 0xa4, 0x5, 0x200, 0x1, 0x40, 0x89d4, 0x9, 0x3, 0xf36, 0x5, 0x9], [0x9, 0x1d, 0x833a, 0x9, 0x69458f05, 0xfffff000, 0x3, 0x1000, 0x3, 0x0, 0xffff0000, 0xe4ce, 0x4, 0x4, 0xffff2e8b, 0x800, 0x24135176, 0xebe, 0x7, 0x0, 0x1ff, 0x1, 0xf868, 0x7, 0x7, 0xaf, 0x6, 0xffffffff, 0x800, 0xd10, 0x3, 0x3, 0xffffffc1, 0x77, 0x8, 0x40, 0x100, 0x10000, 0x0, 0x4, 0x252, 0xfbf1, 0x101, 0x3, 0x80, 0x458c, 0x1, 0xd6f2, 0xfffffffa, 0x7fffffff, 0x4d, 0x3, 0x1, 0x9, 0x7, 0x8001, 0x9, 0x98, 0x3, 0x80000001, 0x8, 0x1, 0x7e9, 0x40], [0x63, 0x62f, 0x401, 0x1a22, 0x5, 0xffffffc0, 0x7, 0x7, 0x7fffffff, 0xfffffffa, 0x40, 0x8, 0x0, 0x4, 0x2, 0xffff, 0x40, 0x81, 0xe4, 0xc0000, 0xcc5, 0x4, 0x5, 0x3, 0x1, 0x1, 0x18, 0x4, 0xffffffff, 0x5, 0x5, 0x1f7c4db8, 0x80000001, 0x8, 0x3, 0xffff, 0x0, 0x3, 0x20, 0xffff, 0x1, 0x6, 0x19437cb8, 0x3c, 0x1, 0x1000, 0x6, 0x5, 0x3, 0x740d, 0x7e, 0xa4, 0x0, 0xc7, 0x8, 0x2, 0x9, 0x0, 0x20, 0xfffffffe, 0x79a, 0x3, 0x7, 0x100], 0x1e, ['\xbd-\x00', '-:^\xd6\\\\]::)@\\)\\\'}\x00', '\x00', '!^{][:\x00', '%\x00']}, ["", "", ""]}, 0x440}, 0x1, 0x0, 0x0, 0x400c040}, 0x40) syz_genetlink_get_family_id$fou(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x4000) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000009c0)={0x800, "3bef98"}, 0x6) 01:37:25 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000240)=""/217, 0xd9}], 0x1, 0x40, 0x0) [ 2190.491344][T22361] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2190.565625][T22358] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 01:37:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000193101000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:25 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7e23a065916bffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RGETATTR(r1, &(0x7f00000004c0)={0xa0}, 0xa0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000580)={0x1000000, 0x1}) [ 2190.622211][T22360] lo speed is unknown, defaulting to 1000 01:37:25 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) [ 2190.766423][T22372] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:25 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f00000000c0)='cubic\x00', 0x3fffff) [ 2190.810485][T22372] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:37:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000193201000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:25 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) [ 2190.970101][T22378] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2190.997514][T22383] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2191.069624][T22384] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2191.198623][T22368] lo speed is unknown, defaulting to 1000 01:37:26 executing program 0: unshare(0x42060400) unshare(0x0) 01:37:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f00000000c0)=@isdn, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/234}, {&(0x7f0000000280)=""/37}, {&(0x7f00000002c0)=""/51}, {&(0x7f0000000300)=""/75}], 0x0, &(0x7f0000000480)=""/79}}], 0x40000000000021d, 0x20140, 0x0) [ 2191.801008][T22394] lo speed is unknown, defaulting to 1000 01:37:26 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7e23a065916bffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RGETATTR(r1, &(0x7f00000004c0)={0xa0}, 0xa0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000580)={0x0, 0x1}) 01:37:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000193301000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:26 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000f00)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000280)) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x1000) 01:37:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1800000042000175"], 0x18}], 0x1}, 0x0) r1 = dup(r0) read$FUSE(r1, &(0x7f0000001640)={0x2020}, 0x2020) 01:37:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:26 executing program 4: r0 = socket(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000001980)={0x2, 0x1}, 0xc) 01:37:26 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_cred(r0, 0xffff, 0x11, 0x0, 0x0) semctl$GETNCNT(0x0, 0x0, 0x3, 0x0) [ 2192.050693][T22402] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:26 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7e23a065916bffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RGETATTR(r1, &(0x7f00000004c0)={0xa0}, 0xa0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000580)={0x0, 0x1}) 01:37:26 executing program 3: open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) open(&(0x7f00000007c0)='./file0\x00', 0x0, 0x0) [ 2192.147943][T22402] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:37:27 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) fallocate(r0, 0x10, 0x0, 0x80019c) 01:37:27 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x11, 0x0, 0x0) 01:37:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x50}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:27 executing program 3: unshare(0x2a000400) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000003c0)="3286", 0x2}], 0x2) 01:37:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7e23a065916bffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RGETATTR(r1, &(0x7f00000004c0)={0xa0}, 0xa0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000580)={0x0, 0x1}) 01:37:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000193401000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:27 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/197) 01:37:27 executing program 3: unshare(0x2a000400) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000003c0)="3286", 0x2}], 0x2) [ 2192.478144][T22425] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7e23a065916bffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RGETATTR(r1, &(0x7f00000004c0)={0xa0}, 0xa0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000580)={0x0, 0x1}) 01:37:27 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x6, 0x3f}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0xa1, 0x4, 0x81}}]}}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x5b, &(0x7f0000000200)={0x5, 0xf, 0x5b, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x2, 0xf00, 0xbb4, [0x3f00]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xf8, 0x1, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0xfb, "f44f3bf50942eb0f45a8e707d918ef52"}, @ss_container_id={0x14, 0x10, 0x4, 0xf7, "30c4949f32ba77bd3af437809e09524a"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "16e2855acfab47b19fbcc3a28c30218c"}]}, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) [ 2192.529915][T22425] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2192.557607][T22426] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 01:37:27 executing program 4: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) utimensat(r1, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0) 01:37:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000193501000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:27 executing program 3: unshare(0x2a000400) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000003c0)="3286", 0x2}], 0x2) 01:37:27 executing program 4: r0 = socket$inet6(0x18, 0x3, 0x0) sendmsg(r0, &(0x7f0000000840)={&(0x7f0000000240), 0xe, &(0x7f0000000440)=[{&(0x7f00000002c0)="1e", 0x1}, {&(0x7f0000000340)="e0", 0x1}], 0x2}, 0xc0b) 01:37:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:27 executing program 5: r0 = socket$inet6(0x18, 0x3, 0x0) sendmsg(r0, &(0x7f0000000840)={&(0x7f0000000240), 0xe, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000340)="e0", 0x1}], 0x2}, 0xc0b) [ 2192.771083][T22441] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2192.787460][T22441] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:37:27 executing program 4: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000200)) 01:37:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000193601000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:27 executing program 3: unshare(0x2a000400) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000003c0)="3286", 0x2}], 0x2) 01:37:27 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_cred(r0, 0xffff, 0x11, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) [ 2192.903035][T22446] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 01:37:27 executing program 4: mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) [ 2192.961637][T22454] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2193.334189][ T3933] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 2193.553993][ T3933] usb 6-1: device descriptor read/64, error 18 [ 2193.853979][ T3933] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 2194.073890][ T3933] usb 6-1: device descriptor read/64, error 18 [ 2194.194718][ T3933] usb usb6-port1: attempt power cycle [ 2194.617543][ T3933] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 2194.716041][ T3933] usb 6-1: Invalid ep0 maxpacket: 0 [ 2194.874276][ T3933] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 2194.976220][ T3933] usb 6-1: Invalid ep0 maxpacket: 0 [ 2194.981727][ T3933] usb usb6-port1: unable to enumerate USB device 01:37:30 executing program 0: mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/80) 01:37:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000193701000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:30 executing program 3: ptrace(0x9e7, 0x0) 01:37:30 executing program 4: clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x0, 0x1}, 0x0) 01:37:30 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000011c0)='./file0\x00', 0x8) [ 2195.754988][T22466] validate_nla: 1 callbacks suppressed [ 2195.755010][T22466] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:30 executing program 4: semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000200)={{0x0, 0xffffffffffffffff}}) [ 2195.828975][T22467] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2195.831068][T22470] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:37:30 executing program 0: clock_nanosleep(0x20000000, 0x1, &(0x7f0000000080), &(0x7f00000000c0)) 01:37:30 executing program 3: r0 = socket$inet6(0x18, 0x3, 0x0) sendmsg(r0, &(0x7f0000000840)={&(0x7f0000000240), 0xe, 0x0}, 0x0) [ 2195.891080][T22474] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 01:37:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000193801000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:30 executing program 5: getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) 01:37:30 executing program 4: clock_nanosleep(0x20000000, 0x0, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0)) 01:37:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:30 executing program 0: open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) chdir(&(0x7f0000000000)='./file0\x00') unlink(&(0x7f0000000080)='./file0\x00') [ 2196.060797][T22482] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:30 executing program 3: fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000400)) [ 2196.135531][T22482] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:37:31 executing program 5: clock_nanosleep(0x20000000, 0x1, &(0x7f0000000080)={0x4}, 0x0) 01:37:31 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_cred(r0, 0xffff, 0x11, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x8}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x8, 0x0, 0xf1}}, {{0x9, 0x5, 0x3, 0x2, 0x10}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x23, &(0x7f00000000c0)={0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "3ae15ac92aa0f47fb7028b3495618ef2"}]}}) 01:37:31 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) fcntl$getflags(r0, 0x3) 01:37:31 executing program 3: pipe2(&(0x7f0000000880), 0x0) [ 2196.245189][T22491] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 01:37:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000193901000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) [ 2196.321054][T22497] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 01:37:31 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3}, 0xc) 01:37:31 executing program 0: semctl$GETPID(0x0, 0x0, 0x4, 0x0) 01:37:31 executing program 3: clock_nanosleep(0x20000000, 0x1, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0)) [ 2196.405221][T22506] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2196.480266][T22509] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:37:31 executing program 0: setgroups(0x1, &(0x7f0000000040)=[0x0]) 01:37:31 executing program 3: mknod(&(0x7f0000000540)='./file0\x00', 0x1000, 0x0) 01:37:31 executing program 5: clock_nanosleep(0x20000000, 0x0, &(0x7f0000000080)={0x4}, 0x0) [ 2196.591881][T20372] usb 5-1: new high-speed USB device number 6 using dummy_hcd 01:37:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000193a01000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) [ 2196.735626][T22525] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2196.759212][T22525] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2196.784556][T20372] usb 5-1: device descriptor read/64, error 18 [ 2197.053997][T20372] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 2197.243904][T20372] usb 5-1: device descriptor read/64, error 18 [ 2197.366075][T20372] usb usb5-port1: attempt power cycle [ 2197.793990][T20372] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 2197.904443][T20372] usb 5-1: Invalid ep0 maxpacket: 0 [ 2198.054892][T20372] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 2198.145039][T20372] usb 5-1: Invalid ep0 maxpacket: 0 [ 2198.151023][T20372] usb usb5-port1: unable to enumerate USB device 01:37:34 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000005c0)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x3}, 0x8, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000240)="d43f5e14139817980209b0d4698f6156f9825f9d", 0x14}, {0x0}], 0x3}, 0x0) 01:37:34 executing program 0: fchownat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 01:37:34 executing program 3: mprotect(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3) 01:37:34 executing program 5: r0 = socket(0x18, 0x1, 0x0) getsockopt$sock_int(r0, 0xffff, 0x800, 0x0, 0x0) 01:37:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000193b01000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:34 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) sendmsg$unix(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000cc0), 0x9}, 0x0) 01:37:34 executing program 3: r0 = socket(0x1, 0x1, 0x0) getpeername$inet(r0, 0x0, 0x0) 01:37:34 executing program 0: open(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) lchown(&(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff, 0x0) [ 2199.328762][T22535] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:34 executing program 4: select(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x1}, 0x0, 0x0) select(0x40, &(0x7f00000003c0)={0x4}, 0x0, &(0x7f0000000440), &(0x7f0000000480)) [ 2199.393785][T22532] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2199.396275][T22537] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2199.433144][T22532] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 01:37:34 executing program 3: select(0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) 01:37:34 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x0, 0x0, 0xfffffffffffffffe}) 01:37:34 executing program 5: shmget$private(0x0, 0x6000, 0x0, &(0x7f0000ff9000/0x6000)=nil) 01:37:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000193c01000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:34 executing program 3: r0 = socket(0x2, 0x1, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000000), 0x10) 01:37:34 executing program 4: sendmsg$unix(0xffffffffffffff9c, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)="df08dd0355d50217e510c198d4667022e3a9839b877aace578181e5b6ffc28fb4c10099fb87847615c2062ec609573be50a3acb969f1cf141a37214a178afffaf47b6fead1b1d9e0f41b7989febc575aca2a163dc57d5d91b38972fe107b4fad5b2b637b47e2fcbb8003a422cc6e2a1d8265b67e2182f34e871c1b8dc889522cdc07"}, {&(0x7f00000000c0)="8622df0d6ca6af5e08efa599a40d1e51a300e78b9abe40fdf804e06655527dbb739394cabfb1282db073967b04a44c06f7befa0605a7e1e5"}, {&(0x7f0000000100)="37bec3980625f9ae88eeb2fedbb8d44721db44c4e370e3380da9dd7b4d4066d6e55366991cc9b27147c28153ec10431b57d4514f2273496da2b2c552badc3ef0c6815196fbe2eb842b5af14801b865"}, {&(0x7f0000000180)="a826be853519fc68e8ad802fd9d0a176a6256a6d7b4b5ae99c315d068fe5dd3fc088cc6f0b70ce534f291115ea3b6e6127ea0b64a5d599"}, {&(0x7f00000001c0)="b947376814fea685673a9facab53fdc729b6f70164423c9bb7aa77bcdbe37f28eaf9e47c2ea8b42cde010780e7f2fddd0b49fd3d224e69aaf25efb466caba169528b9452c5f4c9fcbe27d719d075d62790d492937bac4442eccf72d6f2c028b48b7716b5a2d1386ce2173e208b8d3399971b43a7c446284c7ebb15699919c46aa86703a29a124d7fac89e5b173790635b4c5cfcb66b6cb40af0e1ea1780fcbc2f6327c1d57ceae36dce98283b52cd9bdbcc38e5179"}, {&(0x7f0000000280)="736a76423403786892aa9386f92f66df4471ed4017e3b5399721b26191b30293996913309c662da1bb934d5f702d2d3b90a3b1e87440ccc0f21c5cf231e18d29d84c0f7931f39c7802e82a03fc56d21f672a41a95651736c1300"}, {&(0x7f0000000300)="f202fc5a6a5284bc6cecd12d99d8daaae7ddc3166490f0d4fa3eee2513f5308c38486da5256264a049de5e737f084de1cf08d29bc272157d8ef6b8f3528589ce34df9aae9707cb3449ffd4e4e82f5dbd91ea09c04961256064bf382fda2572e1054c7f4fded2be2430af0008c139c50d7a"}, {&(0x7f0000000600)="71099d85b4a68cf4fb93e0a980938505cf69f31d1a29653ea46b697073d51de4b0f6aa3b364fc8bafb13e372a94c6aa96f7e4c436655076e2f5a09551e422a5132647d47dce55d4d8bf9cb45bcc76c043d20762fc9e291f26b68d43cd677e5047da221da7ae17ae2216933b2d6c74a044315f9aaf693b8d13637b3c78330b09d21b9b12cf745565540d8f1854eeccd0252af6c0448997424798db64f1919c18290834feca51a6d01076a7a50510c483191b0ead9712b9bf5b4f9d26f4dc114dcb19630b8ef73f0735dba76af09b913"}, {&(0x7f0000000480)="0c45cf43af002bba998875ba46d54d43b31f3110288adbe9939ffa2da1b438063d08df8da9321456531a95322a80565ebab1210dba4a05ff5c147624b7a8cab77648271ef818884e59d5727c51acdce93969f341b939d138e715b4b6c1ec5686e86b64eada40d1b0b5b4ab162e81e8900ad97700ec23b1d61e507e6bc0e5679bfe960c468ec4502e93dd923c74f6eaef93ef36ff9657c2"}, {&(0x7f0000000e40)="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"}], 0x10000000000002e0, 0x0, 0x0, 0x1}, 0x0) 01:37:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) sendmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x401) 01:37:34 executing program 5: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 01:37:34 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x800, 0x0, 0x0) [ 2199.672089][T22560] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2199.711511][T22555] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 01:37:34 executing program 4: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:37:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) shutdown(r0, 0x3) 01:37:34 executing program 5: r0 = socket(0x18, 0x1, 0x0) sendmsg(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[{0x10}], 0x10}, 0x0) [ 2199.741502][T22567] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2199.777574][T22569] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 01:37:34 executing program 4: mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) 01:37:34 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000001240)=@in={0x2, 0x3}, 0xc) 01:37:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000193d01000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:34 executing program 0: shmget(0x1, 0x2000, 0x608, &(0x7f0000ffd000/0x2000)=nil) 01:37:34 executing program 5: select(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x1}, 0x0, 0x0) 01:37:34 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000003ac0)="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", 0x171}], 0x1) write(r0, &(0x7f0000000700)="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", 0x201) 01:37:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000001240)=@in={0x2, 0x3}, 0xfffffffffffffe23) 01:37:34 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)) 01:37:34 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000280), 0x100000000000012b) 01:37:34 executing program 4: r0 = semget(0x0, 0x0, 0x0) semctl$GETPID(r0, 0x4, 0x4, 0x0) [ 2200.018233][T22589] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2200.058002][T22589] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:37:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000193e01000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:35 executing program 0: r0 = socket$inet(0x2, 0x8001, 0x0) bind$inet(r0, 0x0, 0x0) 01:37:35 executing program 3: mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x71e942e35a7a98, 0x10, 0xffffffffffffffff, 0x0) [ 2200.221576][T22603] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) sendto(r0, 0x0, 0x28, 0x0, &(0x7f0000001240)=@in={0x2, 0x2}, 0xc) 01:37:35 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000380)=@lang_id={0x4}}, {0xa8, &(0x7f00000003c0)=@string={0xa8, 0x3, "d29359bebf5f621b2af7043ab038ed9bbfb7b6c9186e3d6fd7fba32d0356d4f191bb7b2a7b46ec8bbe27cd58f3e3ec2413f308c19a90234a4bdae34c7031287fd78071b3c45d54d200fcd6a04930ceb872fce706d0a49482442a08876e21a12ee17845686af646eb39ad7399252ab1a2d4a70502a92cba4db60a1a9400472dee9b178635d78688a05a5fb9f9a9a385c1cbe780d76d851e8b117f6e3d6591b4a38491412095dc"}}]}) 01:37:35 executing program 0: semop(0xffffffffffffffff, &(0x7f0000001040)=[{}], 0x1) semctl$GETALL(0x0, 0x0, 0x6, &(0x7f00000011c0)=""/235) [ 2200.293745][T22603] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:37:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000193f01000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:35 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000012c0)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001940)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000001780)=[{&(0x7f0000000240)="638e17c13f09a47bae04eca45a914b699b84c63adc8bcaafa94caa552c17ea3051851f9a461768b233aa60c8f36cbafe38ae15a6f4ea2fcd80fed630514ac60d69fbd14303fa16b4abde0a52bb33d796d63784ab321633c8a711500c067f812d135730", 0x63}, {&(0x7f00000002c0)="1924d6e1b2765bd2cb2737e8fb01f581bdd50c1a5247dcc36af0aff33fc02636ededb6c5432d1c1ec8c19d289bbf7f44f3c528d2414b0059c8836b0f2b96f8b4055e994c7e788b6f8cd7ce5de3df3248dff18dba5a1a61e6d7bcbd416ec8f43c92c510363b8d4d7b6063789c5f3637fe6da78fd8e3968fb6493cdcdbed6707768db2144c62136d57dbd3e827d3ed8ef1e4607dc79c90e2f70dab0ef7b2dc59e068e38d228aa918c1d62c5d920287d42a0bd69b735bb892ef3be822cd3e274a0e62aea940057c3a5302a3699646f25153ddbdd3869238d7e247d6af5586dc67c54420c4697ba886d551dd20faf9", 0xfffffffffffffe0e}, {&(0x7f0000001a00)="6b484f5cc0dce84845eae32aeb9793968cf61e3e5a850d0ac170e55ac3cf8bdf64f6575e17f6279b9ac59f44f9ed0d4fdedcf50aa6287caddb0a1f81d7fe11ff375237249aef5aa8b1df292b705cc839bf4c688668636b64053d9109e66745b582bd3176f428827928b79491e44a33bc1d4491ce846be1ae7e525f4fd1d4b70fb915002bf164a42d1b42913d029153da8b7cece8fa7b4fdfce4901df22971049dba42987acc8b58be86046cc77402b6c55d6fde6bf7807ac2a221e1fdef647a63f219b3cf470802a06a6b662e24185701f89bc9d5ffa13d76fa44bcbfbefdddc485f78fab4a91eadd573c943f930562294199e33c1b45e890a7b7c4a9da417897f16cb9143d61a8538b46b38bc38769997194c3c011b6e34b1e06faa64c8235d463643c893869df73b13f505f40ae6f39197a0b7270a63e199d274b4ebeed83d1d5fdacc3bf77242bb4505f1c4dbf927b4e33142765522323e8717aed6a272fc02665eb9936ee3ed911995c15692545ed966d9d78fea141e5960a09092daccc115200ae315602f4b9e2e459f10f80aa5fd70db43580e836cefb96b2cfd81d647a0b44e2d34fbd517633a592c751b4c16a774f0a8ff37384163b7be2aaca9890b5ee3915701205ede69e7638de8d333d96b4f58d7c941ece08d7e4315991a3ff218ae619f34eeb05c144c80393302666a8e5dabdb0d2201f981be9a9d3188213b8311e03ac4a4ab6b3519732f26f7857f6c0d38553b5c98f1b196466dc091638170328ca8f4930aaa1cd4adadd1aed6850cef774945ceda9f9ba5a93cf7465dc4b1641e33f0feedaab84928fa9152b31d5de1c85675c2ccc320dc3fff5eb8f764700440f21f5e9e671d22b102456a38fef320a5b93ea179a45d77735990e171b95530c5f1cdb685aee3f8a59a7d9f29ab9d0a2bb00b910e0a55beaf1d9e21f742f835947533b3b6344c18e4db88c6bb9594093bb691a05fda55f4444093bbd0dd0ecc8d7eea526961f8f748a274afe99cfbefb115c3e2cedd30c83735619fe2edee6c7a4a3b6d6e08221fbb45a7edf5cb6f04975c1b83ce7fa6152ca3d0444b410eb7e457a4c3ade95ac78b11dd5df4761180f89fb3cb50d58d533852256d9dc4a108492cc6bb869e9767f929af4501820b2cd0eca2076b7a4f67a0a99dae8a1ee485ea2bf2637baf1264e8a36c4e68f2dd4f98e0e74e87f7263593c69ea8db333328730b2d8f4705788b15fc38d5528f7dbd40410d8d9350488ccc16cb68c77f3536e9393fdc99b4b8537c686377d50251f6e8edfc30971f8158ad908856dc470a78d766a87ed4ca505baf73f99749ac2529770bcb55e6f5bc64c7bb7dfac2bdfcf2c2cf24748df1f4eab69ad3e81aaa43e8a31c69fe70c2c19987db7d4070febd05d2c776f22e6d0c7668472d6c45e05dc9afd359bfda5ec18e4bb9c77d349680bd32cb58f09b31ba0042a2be1d5af3b6ff5fe38fdc0411a018f137bb66685259a3d8f9c012a9b9bdf1e0212558470813f9df136eb29b141cda7c9344ee3719316ccb04da53647fc6cfa0d3ab0419187b8f60f74ef45cfd6ead011a2b8d89ec03bd8a5c8493b9bd119964babd242748406c7eae67c580f89cbff9d58d9b56c2c20a6634d51737af25f63a9dc4a1edd36fac7f2e07197b3459628f74afc03b86677029d9ece9db4f68a9533fe23b733a28d3ce4c287542f4a68f5a0e2cf0fbb9b0651c966a6abd03176e670c25b6f9b5ffa1ab01709e19eb696843477c44a16fdb09da71d2eead54bb6633057ba7eb0e09e8b6de5984fd842bbc94066824ae3d15f23fe2870ff32776a569d47f8213c89fbc74c36bb8cbf026fe41d65d8ffa68c0447e4936f83dfd09e9bb65e6a40264410bb89bdc8ff0da82f42642c1084500008e441b81ddbabe33d82024803abaa61dc8c9e688a9d30b95f3737117f74628d060e704bbfcddb6c4fabfde7720049b6dfc5d3d27d46947104aec89285be8c8508a984569ee64185f95e9a81a8e1e61ee92f6093c40918617c59fd84c4fc0d25959d8729283c98e994206fbc218b318d5ff50112774e10184fb70f1e7be6fa6639cdffcdc6f7bba80bb8c93e37e7f7877f0a72924fdba0590e3843275ed352eebc7daebdd0a52d13ee5d0a6be5147f365c4f7d6a26a0d2ead68f6bb5c58eef686e04f5f5d2e4f4ddfdb2f8d9db1d0d3678dfe0b386e04b08b3e61e7ce413f0fbb628b9937f9aabfdadd9814be78393e516460e748a7bbff9691c438a657a2c06a14d32e8e0afcfc51ea3b53ae06e8a3ff24629dda5c3b7b4c7f92e7a2b4d03a644f9422d723db8d0bd795328e72ebfd272f4377e1bf0d7eceb5317a45e0725e3e45f51d50d08e2638f16b11e26f64fbc2309e06f7050381f2dc282d9752a850ceba97d15ca0c05856b7984bdc65683c61b9512666ef80383c9b5c32894c04b7d65f5bd4a5e031f29be9b52d150f06b012e24a47c25c67177a7990192e39404283dd257c415caddffbcb8149d462c1a4db6bf6e205593fac34ce598067f9d8ae638f9de3c07dba76d800a7d9f7cf9217c9552d77d49f22f5e03ae95c7e986b813983246876f5721c1ef24a869ec8f71db16763fc3750e413271e24155860e714472bd533d6f5fb7665ca9740df9165aca920f22cb38c8e28b8e5f0a4785d43fe953f07eaadcd83b221b6531169b67d70f6d81300daa213018c4daef3c288dbac41a6797a6f1fbd17688a1b181e4744b46af7e1d2ac40ab101b5e332c1928a4d98a074b1fe3b1c336591300a96751f9c51998a11f7a30ab564cca29b043238e389c49be0c2343a54432fb7ad4528ee871b3339d83a90e27413c8773dd88fed7573aab27b3352674c7ad6322aba84d9b2fd47ae661bdd3e3c4a59aa3ce9894341afeb3dd8966cfe8d8ee3ac91c981a11aeaeb3a0c457a27f3f7148f28f976676f6b3a85109e7505aa3b169cdccdafe11e271e0ac486530fb02ffa324bf73d3f6e2e58c524006892223f9f8c4e267a0544dd83e01789ee424a8df5c85f398cd87ec8cf87f4f5a02da6e03e8738d564930aa8b934b4058b27e0ef0829d2253a9c639d282724af98561eedf24616c6bfbc62c10a28dc1212b1e53a82dc2c16fc108aec83d2570dca93cfcfb57b2e13302cba4feeca5257c1e2d10b6ecfaa35e388b5d15adba784256bdb72ee1fcb7222e20b668e0c09fcb30c274fa6476bfb4c5ec26b7a951ed5437356032a899554decf99a87d9b21eb838a767a3d690bafd509d69ea6b4c43027e2b397b3de6803300d196d34fda4378e60824734b6d53689dd1e80e0a8745a588951b282776079e9e1789d8fdef13654f67d41d4283fc061b4095c0975deda41310f6cd81edf8223478d14ddc6f589a463657f152782bdc3f4fb7dc7522c2f6585afda987367dc22ae55141b97054ef7df8b8a8ed44f126c1ca6a2eaffcc135cace9c013a083bea4ac777a0357ea99bde98890d033abacd53100e57e6d564b61da1841d3f6da153d56db1ceba69d9fd6bd1f5e2ebfb2b3f770161e405d652f3ffd14ec609fd6459dba8823629ad941b56574904dcd5be40fdda615ce15b30be88482afe157c9407f879571d997bfe2dff4850bf66d5b27df1c584a2d2f996d07c6f017aa47ff80bf616b7028b8ac773aed47703a5ee29a3c2396ee0915bfd871d2b3b20ed1fbfe1500f841cab8d3154cdcad2a29c05ff0676f5523400b1253ada1615373fed2c49a14a150fa6f91ac187d7b591714f858d574f76852a65d528821e2491bb6f1146eeeefd6a7c3a79647598cb469b16cde4392098f993c357a44920aa2176b91fef37a43c4bdaf862f231cdce4025fa7c0fe12dad04f3768533bd029181d1e6a15a21a0e94d595e7448dac680e1a333056fdac2f9a94e0ac3dcd7d9d5de5579517470228df52f452f04710ec1d0632c510d1f157a04a873a7197c45366e664941ba062aeb03eaa27c5cdddcf058c0d6ec550fa64294430957a86afc43a7724808b54996c37147f775b5fe8c26ed7547dd3197542c64bc04cd1d31660259005c1158c478a14fa131272e4992269f96add485ce77c72d6d99e268892dfc7a3bf152eb00117c2be71f6a5ee142baecc8f9eb7ce70b34805be9fb98edc153f377f183865fee22c65f6eddbc30a79270ff0ed7af17d6fc08f2c2df01f990c1f3bca3b56bfbc2f996e9a728a70c1e3deda572c03a30cc64d4a8c89d7503279a4f2d1e1cb188b37b89734b10cb6914f4e4fafdc2e1a9d97c5f6f1b54cda2d86f081720f630542c03b319a3f941d58f82c322479f133fda503cf1f17bf9d20e0ffbd99f169bd497b5b083510f86b206523aa9201794cb1582d1d94e5999fd61fa30c56229c2c2c075fdfd1d07c27a60de2ea39d877fb6aa7bc94899eb75864c532febd9a1b9d91a8a5512511f24747a6bdf2fbf9d0f3325d482aad2efb07674903b1c2ab4ccff259560a86cc7e1b0daec624fee6f44b184b34f247defe6cee2bc5e6bc105e2939e0dc00b225daa6d64c5f8e2a19545bfcdcfb4215cf5fbe76bc78090bef028be9cf2a7962316accbcb335df8bba92b604df7f9470fe103bd21567ddbd1bc618545dc0bcdc389254cb9b90b9fb3ab7400ff39a6ef487493ea8da6b0530c44b0cfa743f99ae880ca656d1e0a1ee4042f50ed259776714743617fb1f87d4236d7b87c262b3553e3acc6a04e35f655aff8c9819ba8270884cd89448724204a7a3834b562db2f4e96345f7e439e64cad20484bc6ac407c1fade9c503e34a8f512f7a2439faa0f779d5c83471db75c3ce7c1ce541e33c9ba6b9c69abe9d128707aa3391e29bf25262ecc8c67cc51120980c37341b9d96a001432def3825eab58a4b8da75f5fa469a32ee73f4d032a649f29d36bf03cac4d93f8e1070bec654f3f959be611d70e5488a3e8d0d0b5e2d6443bea086ca6041788ca0dac8466f4f4aa7a93cdd78de18b16dc245770e1e77c64ea46dbac537f5c95c76e69fad31fd23390b6223c59814cd05a43a7cfea5be2bbb5b86cbaf36bb79ea795a2661daadd350fff24a830f3e9f1853619f6d566b3d7c67a41c50cff3d2c9e7d461f07c54120737ac440b0ff437d3eee27d298221e22c2411b114d1f7841b390cce865abe5afa2730887084670003cf6e1e13617b470851d1f280919c8b70706a9343f75672d8bc588405a184d9411da2bbe592f23f0545b9bbef030d7ec02b2e879891b43ccc4384e93fb7f771c38e92bd2226fc32d85a63563f3d93320fb93ac624bb0b4703ccb7c115161be4fdb4097c4fee85f1032c7f92e3c742d5f801b31e492889e13143e335e672cc085a3c7bc72b965dbe8f592df02c9d5c08983ba502d679e07da8e1437b7ad15a5274cadbac978fd29369f9d831d8e7f509c8ec1002fd8e64ae547af878734559d226b5458e84599656ffb14de944cb1e1fa3d675b71d4828289f02ac80281e937df715a08d6d8f2f00870737e5ebfa5868cbbe7c892d7d8e6592fccb55aaaeba784e80a62ad9a53fc38a4b145620e7f6af43644f1f1790a3b21fc0cef71db5e480383710b9c9394c056ba13ef42c2caa09a6ca622ae006dd6d783afa1b971f51a4b31faa7125fc5c86405000eead4679f1505fded1f1ca1b0e297a9e03014fb4318e9200587d80f7f209d221d5f4dfd086806660f24e785e00953c4ba95209ee70a2856880705b3109a5a5849c0e5173e13a3830fe25d6ee01776acf23ea73378ff60b2f76347cc3d21adfa146453faa99e0853a9a72ec83ccec275af6a2bd2f804856fa1c602af3a86df400c2d8e064fe6991a854b033f550ffcc1d9c1967f683d3b5ae8ed595ef052afc90258af8192a74b3a10dec829446dabcfa8ddac142a526a7183e95dd8893c584b7ee6e026fc66e282a6e0c6375fd6d84b58f3349d9f753018f0a05bd22fb599a9718adde", 0x1000}, {&(0x7f00000013c0)="73007e8cfdd3a43eff3c8ec6c85c7d8be2e84e83d6950e76cc0cbc71b81de7eff4deb54dbf6bb2690be92bfc7dffc85d0d053b7a2eeca84ac118c77b8c6628a4f1a9a7080586798fc37c9597665e870f02a504bc7682ce2019c3dd1ec71188ad670c9800351d4c543d17e6490321647ef788488bac01e80a918aeb0fed8fa36cddc0ee31cce45656ad71d9707315477cc0be7ef2326d122460fb6d1f949dda25a1f926444fd4f2d0af6156267779b811a42222468540b764454ff83aac5f88af9cd00d00122497fd4d298ec35405c2366fccf552242208c75cdbc00f607ea5464831d25331", 0xe5}, {&(0x7f00000014c0)="9fd1a0b75d6023a84ee9018a88f8de86f86cba3ebee4932881fc754444e90c24eb5029e735a5bd1822efc7aa225b9233972d2cbb63246515c788ea24fdb612b75810873743126f5cbad08a4cdd91fe1b63e41b03e3730991491d073809939bfdc5ba913bc0e5394e5a37372b619cdd78411065d963847e2ae5785d22059eaa6d22c543053d5a8f80c3089a0690651dd35b74fcd1445b8a2f3c741176083b677b065ddf96bea807f2ed84ebc7d70ba8e0a1c2c8f95869c48be110dd9582d62031e52ef38bd5781d", 0xc7}, {&(0x7f00000015c0)="b3f07d9cd95e71ed56835321825edc064c024c63ad309e406b9059fe043bcf474233fc6eabd84e4d183c0acdf713964e9de71d40303242fadec15e15af34d9498a4fd42933cd99c0a794962de7a30eaedc4f02e7f874c343150c47ac5535aee97ce5a076f3b1c970ed3838a886f75052eded80115d0a9d6750162e9bb35c21f7fe1fa1c1892d96f957cd77eeac50e1f46bfd39615dea43bddabdc113f352e7443a6863fc3c08f1c57d6af07ecbac4ed9c3", 0xb1}, {&(0x7f0000001680)="dadcb5cfd72d", 0x6}, {&(0x7f00000016c0)="611334fc33b71315777ade37fc222449", 0x10}, {&(0x7f0000001700)="56597143ce29bd87717ad00cb8973577ee4063b1862993ced86cfce64cf99b958cf04e509b6b5c375a2e58df78c730e5cd541751f63af4c24cba9d5d26851ff5b2e90dcaf01775583759a4b89f7ae72492f904346d3eba8a50581ffd6be1fbbd780e1753c4594a27be8b51514ab7d11440d0542f64902daf", 0x78}], 0x9, &(0x7f00000018c0)=[@cred, @rights, @rights, @rights], 0x70}, 0x0) 01:37:35 executing program 5: r0 = semget(0x0, 0x0, 0x0) semctl$GETPID(r0, 0x0, 0x4, 0x0) 01:37:35 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x2012, r0, 0x0) 01:37:35 executing program 5: pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 01:37:35 executing program 0: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 01:37:35 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) connect(r0, &(0x7f0000000040)=@in6={0x18, 0x3}, 0xfffffffffffffe67) [ 2200.522151][T22619] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2200.561328][T22619] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:37:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000194001000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:35 executing program 3: pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) connect$inet6(r0, 0x0, 0x0) [ 2200.684104][ T5454] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 2200.796435][T22637] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2200.827417][T22637] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2201.054228][ T5454] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2201.234271][ T5454] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2201.244518][ T5454] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2201.252677][ T5454] usb 5-1: Product: syz [ 2201.257557][ T5454] usb 5-1: Manufacturer: 鏒빙徿᭢㨄㢰鯭랿즶渘漽ﯗⶣ嘃뮑⩻䙻诬➾壍⓬섈邚䨣䳣ㅰ缨胗덱巄퉔ﰀꃖぉ룎ﱲۧꓐ芔⩄蜈Ⅾ⺡磡桅괹饳⨥ꊱ꟔ȅⲩ䶺શ鐚䜀ល㖆蛗ꂈ彚惡ꎩ솅힀蕭謞缑㵮酥ꎴ醄⁁ [ 2201.284417][ T5454] usb 5-1: SerialNumber: syz [ 2201.335368][ T5454] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 2201.546283][ T3935] usb 5-1: USB disconnect, device number 10 01:37:36 executing program 4: socketpair(0x18, 0x2, 0x0, 0x0) 01:37:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000194101000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:36 executing program 0: pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:37:36 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights], 0x10}, 0x0) 01:37:36 executing program 3: mlock(&(0x7f0000fec000/0x14000)=nil, 0x14000) munmap(&(0x7f0000ff1000/0xf000)=nil, 0xf000) 01:37:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:36 executing program 3: pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = getpid() fcntl$setown(r0, 0x6, r1) 01:37:36 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000005c0)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x3}, 0x8, 0x0}, 0x0) [ 2202.100991][T22639] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:36 executing program 0: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)) [ 2202.165642][T22639] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:37:37 executing program 4: select(0x40, &(0x7f00000003c0)={0x4}, 0x0, 0x0, &(0x7f0000000480)) 01:37:37 executing program 0: setitimer(0x0, &(0x7f0000000000)={{}, {0x0, 0x118fc82b}}, 0x0) 01:37:37 executing program 3: pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fchown(r0, 0x0, 0x0) 01:37:37 executing program 5: semget(0x0, 0x4, 0x2a4) 01:37:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000194201000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:37 executing program 4: writev(0xffffffffffffffff, &(0x7f0000000280), 0x100000000000012b) 01:37:37 executing program 0: pipe2(&(0x7f0000000480), 0x0) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ff7000/0x4000)=nil, 0x4000) 01:37:37 executing program 5: semctl$GETALL(0x0, 0x0, 0x6, &(0x7f00000011c0)=""/235) 01:37:37 executing program 3: select(0x0, 0x0, 0x0, &(0x7f0000000440), &(0x7f0000000480)) [ 2202.425697][T22666] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:37 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x0) 01:37:37 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 01:37:37 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, 0x0, 0x0, 0x8, 0x0, 0xa) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000040)=""/239, 0xef}], 0x1}, 0x842) [ 2202.517775][T22666] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:37:37 executing program 3: pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0xb, 0xffffffffffffffff) 01:37:37 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000012c0)={0xffffffffffffffff}) getsockname$unix(r0, 0xfffffffffffffffe, &(0x7f0000000140)) 01:37:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000194301000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:37 executing program 5: r0 = socket(0x18, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x8) 01:37:37 executing program 0: socket$inet(0x2, 0x0, 0x3) 01:37:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x0) r1 = socket(0x18, 0x3, 0x0) poll(&(0x7f0000000080)=[{r1}, {}, {r0, 0x1}, {}, {}, {}], 0x6, 0xffffffff) 01:37:37 executing program 4: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x200}, 0x0, 0x0, 0xffffffffffffffff}) open$dir(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) mknod(&(0x7f00000007c0)='./file0\x00', 0x8000, 0x0) [ 2202.753599][T22693] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:37 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r0, 0x0) preadv(r0, &(0x7f0000001580)=[{0x0}], 0x1, 0x0, 0x0) recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) [ 2202.825355][T22701] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:37:37 executing program 5: pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000001b00)=[{r0}], 0x1, 0x5) 01:37:37 executing program 4: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000001d40)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}}) 01:37:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000194401000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:37 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r0, 0x0) preadv(r0, &(0x7f0000001580)=[{0x0}], 0x1, 0x0, 0x0) getpgid(0x0) 01:37:37 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) poll(0x0, 0x0, 0x0) 01:37:37 executing program 4: socketpair(0x2, 0x1, 0x7, &(0x7f0000000080)) 01:37:37 executing program 0: accept$inet6(0xffffffffffffff9c, 0x0, 0x0) [ 2203.080848][T22718] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2203.113141][T22718] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:37:38 executing program 0: open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 2203.374107][ T3933] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 2203.564154][ T3933] usb 6-1: device descriptor read/64, error 18 01:37:38 executing program 3: socket$inet(0x2, 0x0, 0x4) 01:37:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000194501000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:38 executing program 0: mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:37:38 executing program 4: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 01:37:38 executing program 4: writev(0xffffffffffffffff, &(0x7f0000001a40)=[{0x0}], 0x1) [ 2203.675969][T22732] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:38 executing program 0: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) [ 2203.726880][T22732] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:37:38 executing program 4: faccessat(0xffffffffffffffff, &(0x7f0000000880)='./file0\x00', 0x0) [ 2203.864030][ T3933] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 2204.064313][ T3933] usb 6-1: device descriptor read/64, error 18 [ 2204.185921][ T3933] usb usb6-port1: attempt power cycle [ 2204.606116][ T3933] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 2204.736170][ T3933] usb 6-1: Invalid ep0 maxpacket: 0 [ 2204.904012][ T3933] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 2205.004470][ T3933] usb 6-1: Invalid ep0 maxpacket: 0 [ 2205.009923][ T3933] usb usb6-port1: unable to enumerate USB device 01:37:40 executing program 5: getgroups(0x8, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0]) setgid(r0) 01:37:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000194601000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:40 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 01:37:40 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) lseek(r0, 0x0, 0x0) 01:37:40 executing program 4: pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000001a40)=[{&(0x7f0000000940)="91", 0x1}, {0x0}], 0x2) 01:37:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:40 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r0, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 01:37:41 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xd7, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x4d0, &(0x7f0000001700)={{0x12, 0x1, 0x0, 0x5f, 0xca, 0xe7, 0x0, 0xcf3, 0xb002, 0x9ade, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4be, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xb, 0xa5, 0x84, 0xed, 0x0, [], [{{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x0, 0x2, 0x5}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x1, 0x8, 0x7f, [@generic={0xc7, 0x23, "7d2260f073248dee32ef710e08ce019ddd2eb36014e0c1470e085eca70f1e455fae76410926a8abecbccf6413aafa751c653a9ef619a8e60aa0542d3f0bf3f04b1ab043b745e6a379fe5fef7bf27183f71b4eb5569e506681e4af3dedc2dab58c441af7f9ec3c576eb8958040e14ef4a2e6a82a7171236968c5dff8904d77d511311989d4f9689afc8df63fa1d9365d2b1c12ac567511575764c95a19ffcbef23debe3fcecbb6b2882316a375ed38c3ee3fb83a03fda0ff13f7432331e48691279d3385fdc"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0xfd, 0x3, 0x9, [@generic={0xd3, 0x7, "4034376f411744f47f76ceb9b1825707bf1a946a114f586d42924809c8f3f2ab78a25f4667a16091c2b8f612d8261f64e967f43b8a7164315a9969fcd769b65a4bad0575d4c8173b911e8c59963d2f1bad14ff18f2043ed7616a7ee02178d3e666d1c022fa42561a2f64f849d8ff4bef9de909e6ad7233e7020e2dc80314cedb9a282f4beeb85ea68a6bdfe6989cce5a2b93109069c353890b31d218025acc8da2561e588a772728a641cd0b35e9f0dcad2f6602776227297e0f6c062165fc770762624edf38906b64838850dd5857b785"}, @generic={0xcd, 0x28, "d5d1af16a99fc904bb03e0f3731daddcb0c165f73f9489727bbea7deb576e89e2043c290ae1900fdfe9e4cfdf70380b6aa49c8048d91bfb6114f1af6147296493f8b6dcc6b49a2253384e25429efffabe22afc12e57d6e44616c25c944aa36421ba63c3aa6a2a41f507fad8a20da7719e78e3cf00855873a110cfb715f866d849cbc475ad87231838c3e84efb0ee0ab4ab152b2409dc7764b60aa28985370befbcfda5b70a838ba1e64716eeee0f121d2da60b1914a0e8a0c3b61dd669a56468c59c6543b8e13016fd786c"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x8, 0x0, 0x2, 0x2, [@generic={0xa0, 0x6, "3fb0f056e48f0da6a37a3feb02474dc7c8e2afbb9455ec12bdf5c78e9b8017c8172ab05fd58694fbb3da9d5953777c22e68d3fabdff85d11464b9c4126f8f32bed3434c1e3bf4ea056ece1fa8b07681f86b120e2a89b90cc75bb3ab28ef40605b20a7b72a9b6357ec3755d92608e7a6f3829bd57e76ccc599802b258440188ee0bc9afcff50b60dbec7c6123a905467db0ab591bc6ac31209a7cba87dbb4"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x200, 0x81, 0x8, 0x3, [@generic={0x6c, 0xf, "6fd924f1e1417ce7bdfb80b112c658c66c69dbab80eeddb82432e242766ca6d47f16da9b7e35bc20087867f64ceed94b92c5e021b510a0b35651915d6478378ec36cd7de5304f176d01922abaff8873d1a4a1885307dc6054905abcbe9dfea95230d42cb24bfb0664601"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x20, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x1c}, @generic={0x29, 0xc, "3761df70291c115c3ea793c07fd3b687db2b895355ff837e793d86d3ac284be9ea224f270155cb"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x218, 0x9, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0xbf}]}}, {{0x9, 0x5, 0xa, 0x3, 0x400, 0x4, 0x5, 0x7, [@generic={0x3a, 0xb, "d2ed3e71adfba5cbb3d57518c9302d53a2fdda2a713c5d3473f16740ad46fd57a73bf88df6a8f1052b9288046960f41be29b83274ac1128f"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x8, 0x6, 0x1, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xffff}]}}, {{0x9, 0x5, 0xb, 0x4, 0x20, 0x80, 0x1, 0xd8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xfe, 0x8}]}}, {{0x9, 0x5, 0x7, 0x2, 0x10, 0x6, 0x1, 0xa8, [@generic={0x50, 0x6, "f031ae447a4eb9e6a7b689c08f77543d9cbcb120b2ad115e5bca84f4d9c3a78faa67b83abf83ab908337ed1fb6e00d1bc9962cb388fea2f6b94ec0336b629e420a21bf737063fd5be6ae51509de9"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0x3}]}}]}}]}}]}}, &(0x7f00000029c0)={0xa, &(0x7f00000026c0)={0xa, 0x6, 0x300, 0x3, 0x1, 0x7f, 0x40, 0x8}, 0x8, &(0x7f0000002700)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f0000002740)=@lang_id={0x4}}, {0x57, &(0x7f0000002780)=@string={0x57, 0x3, "35c555bfeb2325cdbd1b25f6d7b2249724427dc775ef099171ac733954b4a5d98298a7fbe89fbd6ec3d88fa5a381df15fd1fe71627cae37367281673282bb109de128e3722ca88b6a3d332db727638c552c67fca6b"}}, {0x4, &(0x7f0000002800)=@lang_id={0x4, 0x3, 0x430}}, {0x79, &(0x7f0000002840)=@string={0x79, 0x3, "fb11c470eb585de185e74cb50307354698cbe6575672d16eda1fa889f5ca67343ff07150aa248177589df5f6a2c3f4fa93b5360f46102b943fd89bf42ae42e80f6d3173107a20b1227f02aec0cfe4e1e62dfbcc24e47b099ccc91db88159267a827856d2997e1a2c0fc694a9da6d4fb53cdab8b018ea51"}}, {0xd7, &(0x7f00000028c0)=@string={0xd7, 0x3, "18e7551d3a8c915a13007d657c0933057f8db568ac3b42f8a4874a8f901462b7d0457a43ca08684821824578d8a9b490f64f6c16a2191f3a193436474be682fe033595e172aed7c9898198b2e159da0af606150c584a5f6d8214445640ac714bd19c95e870fa8ae0c22be0364f7e2c75702f956e7a1cb3728a53e3e5380d581388f6cace855a13b235cc62a1eb56b743c5087b3624446aff5ff334d90ab3514225267b0b0613018e3bb2df70eb99d3cb9c0d19777e5eed0763bb661fce24373cc3b86faa9f53f2c24b5e10a40d9482e47ff76b4f0a"}}]}) 01:37:41 executing program 5: open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) [ 2206.151975][T22758] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2206.169768][T22758] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:37:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000194701000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:41 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x12, 0x0, 0x0) 01:37:41 executing program 5: r0 = socket(0xa, 0x3, 0x24) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl0\x00', r2, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @loopback}}) 01:37:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:41 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r0, 0x0) preadv(r0, &(0x7f0000001580)=[{0x0}], 0x1, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) [ 2206.311038][T22771] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2206.341159][T22771] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2206.533956][ T3674] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 2206.794040][ T3674] usb 4-1: Using ep0 maxpacket: 32 [ 2206.934102][ T3674] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2207.148049][ T3674] usb 4-1: New USB device found, idVendor=056a, idProduct=00d7, bcdDevice= 0.40 [ 2207.157340][ T3674] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2207.166090][ T3674] usb 4-1: Product: syz [ 2207.170359][ T3674] usb 4-1: Manufacturer: syz [ 2207.175581][ T3674] usb 4-1: SerialNumber: syz [ 2207.236942][ T3674] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 2207.442400][T22766] UDC core: couldn't find an available UDC or it's busy: -16 [ 2207.450127][T22766] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2207.462595][ T3674] usb 4-1: USB disconnect, device number 117 01:37:43 executing program 5: mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:37:43 executing program 4: shmctl$IPC_SET(0x0, 0x1, 0x0) open$dir(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) mknod(&(0x7f00000007c0)='./file0\x00', 0x8000, 0x0) 01:37:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000194801000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:37:43 executing program 0: r0 = socket(0xa, 0x3, 0x24) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8910, &(0x7f0000000180)) 01:37:43 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) r1 = dup(r0) fchown(r1, 0x0, 0xffffffffffffffff) 01:37:44 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2, 0x8}) syz_usbip_server_init(0x4) 01:37:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)={0x30, 0x12, 0x7, 0x0, 0x0, "", [@nested={0x20, 0x0, 0x0, 0x1, [@typed={0x4, 0x27}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @typed={0x4, 0x26}, @typed={0x9, 0x92, 0x0, 0x0, @str='/.*u\x00'}]}]}, 0x30}], 0x1}, 0x0) [ 2209.186969][T22787] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:37:44 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pselect6(0x20000008, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0x0, 0x0) [ 2209.237692][T22787] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 01:37:44 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) accept$unix(r0, &(0x7f0000000040)=@abs, &(0x7f0000000080)=0x8) 01:37:44 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES32], 0x32c}}, 0x4000000) 01:37:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000194901000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 01:37:44 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000000)={0x0, 0x0, {0x2}}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000340)={{0x80}, 'port0\x00'}) 01:37:44 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=""/219, 0x0, 0xdb, 0x1}, 0x20) r0 = socket$inet6(0xa, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8922, &(0x7f00000000c0)={'batadv_slave_0\x00'}) 01:37:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="ba210066ed3e2e66f32e0f94b50e000fae6108f20fe6a19b0566dcf60f7921440f20c066350d000000440f22c0baf80c66b8c132af8466efbafc0cec59660f388223", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2209.392703][T22801] netlink: 792 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2209.402875][T22802] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 2209.409415][T22802] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) 01:37:44 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}]}, 0x58}}, 0x0) [ 2209.466096][T22808] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2209.490391][T22802] vhci_hcd vhci_hcd.0: Device attached [ 2209.524405][T22803] vhci_hcd: connection closed [ 2209.526766][T19632] vhci_hcd: stop threads [ 2209.543035][T19632] vhci_hcd: release socket [ 2209.554158][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2209.558936][T19632] vhci_hcd: disconnect device [ 2209.567779][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2209.583252][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2209.595888][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2209.608619][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2209.621325][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2209.634066][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2209.646784][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2209.659500][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2209.672263][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2214.565297][T22814] net_ratelimit: 2090 callbacks suppressed [ 2214.565319][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2214.583610][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2214.595130][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2214.607817][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2214.620535][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2214.632235][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2214.644944][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2214.657683][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2214.670301][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2214.682033][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2219.574396][T22814] net_ratelimit: 2188 callbacks suppressed [ 2219.574419][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2219.592829][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2219.605568][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2219.618308][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2219.630041][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2219.642788][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2219.655517][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2219.668227][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2219.679945][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2219.692693][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2221.427560][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 [ 2224.585653][T22814] net_ratelimit: 2188 callbacks suppressed [ 2224.585674][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2224.604068][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2224.616816][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2224.628525][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2224.641258][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2224.653960][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2224.666693][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2224.678898][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2224.691655][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2224.703355][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2229.594530][T22814] net_ratelimit: 2136 callbacks suppressed [ 2229.594552][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2229.612918][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2229.625078][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2229.637827][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2229.650407][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2229.662381][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2229.674963][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2229.687694][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2229.700390][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2229.711901][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2234.604687][T22814] net_ratelimit: 2138 callbacks suppressed [ 2234.604710][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2234.623073][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2234.635813][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2234.648554][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2234.661244][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2234.674027][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2234.686723][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2234.699314][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2234.712017][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2234.724738][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2239.614952][T22814] net_ratelimit: 2170 callbacks suppressed [ 2239.614975][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2239.633284][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2239.645831][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2239.658586][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2239.670696][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2239.682887][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2239.695621][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2239.708366][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2239.720089][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2239.732799][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2244.625776][T22814] net_ratelimit: 2184 callbacks suppressed [ 2244.625799][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2244.644237][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2244.656993][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2244.669741][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2244.681239][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2244.693966][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2244.706694][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2244.719367][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2244.732140][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2244.744855][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2249.634155][T22814] net_ratelimit: 2182 callbacks suppressed [ 2249.634178][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2249.652546][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2249.665323][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2249.678076][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2249.689784][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2249.702488][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2249.715161][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2249.727914][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2249.740321][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2249.752934][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2254.644580][T22814] net_ratelimit: 2188 callbacks suppressed [ 2254.644605][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2254.662955][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2254.675528][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2254.687607][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2254.700315][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2254.712529][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2254.724720][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2254.737504][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2254.749212][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2254.761966][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2259.654868][T22814] net_ratelimit: 2189 callbacks suppressed [ 2259.654891][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2259.673461][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2259.686070][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2259.698796][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2259.711528][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2259.723037][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2259.735765][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2259.748508][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2259.761024][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2259.773826][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2264.665430][T22814] net_ratelimit: 2191 callbacks suppressed [ 2264.665453][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2264.683817][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2264.696569][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2264.708291][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2264.721014][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2264.733582][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2264.746036][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2264.758739][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2264.771495][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2264.783190][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2269.674594][T22814] net_ratelimit: 2186 callbacks suppressed [ 2269.674617][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2269.693110][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2269.705837][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2269.718585][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2269.730272][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2269.743003][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2269.755707][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2269.768465][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2269.780142][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2269.792857][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2274.685854][T22814] net_ratelimit: 2193 callbacks suppressed [ 2274.685881][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2274.704374][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2274.717108][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2274.729554][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2274.741899][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2274.754506][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2274.767264][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2274.779024][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2274.791755][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2274.804467][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2279.696038][T22814] net_ratelimit: 2187 callbacks suppressed [ 2279.696061][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2279.714468][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2279.727229][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2279.738921][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2279.751651][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2279.764379][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2279.777100][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2279.789833][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2279.802591][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2279.814980][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2282.877848][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 [ 2284.705102][T22814] net_ratelimit: 2189 callbacks suppressed [ 2284.705124][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2284.723592][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2284.735131][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2284.747801][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2284.760553][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2284.772278][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2284.784985][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2284.797719][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2284.810448][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2284.823203][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2289.714638][T22814] net_ratelimit: 2184 callbacks suppressed [ 2289.714661][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2289.733073][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2289.745951][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2289.758696][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2289.770408][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2289.783111][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2289.795831][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2289.808608][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2289.820296][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2289.833020][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2294.724189][T22814] net_ratelimit: 2177 callbacks suppressed [ 2294.724212][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2294.742581][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2294.755379][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2294.768129][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2294.779863][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2294.792630][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2294.805365][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2294.818129][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2294.829826][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2294.842652][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2299.734660][T22814] net_ratelimit: 2179 callbacks suppressed [ 2299.734682][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2299.753135][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2299.765846][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2299.778678][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2299.790374][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2299.803100][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2299.815794][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2299.828531][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2299.840230][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2299.852960][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2304.744090][T22814] net_ratelimit: 2181 callbacks suppressed [ 2304.744114][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2304.762529][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2304.775276][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2304.788023][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2304.800619][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2304.813020][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2304.825711][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2304.838457][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2304.850186][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2304.862912][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2309.756099][T22814] net_ratelimit: 2200 callbacks suppressed [ 2309.756121][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2309.774536][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2309.787298][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2309.799038][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2309.811742][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2309.824454][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2309.837094][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2309.849827][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2309.862444][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2309.875208][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2314.543756][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 2314.550376][ C1] rcu: 1-....: (1 GPs behind) idle=521/1/0x4000000000000000 softirq=228112/228113 fqs=4721 [ 2314.562543][ C1] (t=10500 jiffies g=366705 q=330) [ 2314.567752][ C1] NMI backtrace for cpu 1 [ 2314.572076][ C1] CPU: 1 PID: 22814 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 2314.582554][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2314.592609][ C1] Call Trace: [ 2314.595872][ C1] [ 2314.598697][ C1] dump_stack_lvl+0xcd/0x134 [ 2314.603281][ C1] nmi_cpu_backtrace.cold+0x47/0x144 [ 2314.608567][ C1] ? lapic_can_unplug_cpu+0x80/0x80 [ 2314.613778][ C1] nmi_trigger_cpumask_backtrace+0x1b3/0x230 [ 2314.619764][ C1] rcu_dump_cpu_stacks+0x25e/0x3f0 [ 2314.624865][ C1] rcu_sched_clock_irq.cold+0x5c/0x759 [ 2314.630322][ C1] ? memcpy+0x39/0x60 [ 2314.634328][ C1] ? memcpy+0x39/0x60 [ 2314.638292][ C1] ? rcutree_dead_cpu+0x30/0x30 [ 2314.643132][ C1] ? do_raw_spin_unlock+0x171/0x230 [ 2314.648319][ C1] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 2314.654128][ C1] update_process_times+0x16d/0x200 [ 2314.659309][ C1] tick_sched_handle+0x9b/0x180 [ 2314.664152][ C1] tick_sched_timer+0x1b0/0x2d0 [ 2314.668997][ C1] ? get_cpu_iowait_time_us+0x3f0/0x3f0 [ 2314.674563][ C1] __hrtimer_run_queues+0x1c0/0xe50 [ 2314.679762][ C1] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 2314.685726][ C1] ? ktime_get_update_offsets_now+0x3eb/0x5c0 [ 2314.691776][ C1] hrtimer_interrupt+0x31c/0x790 [ 2314.696697][ C1] __sysvec_apic_timer_interrupt+0x146/0x530 [ 2314.702664][ C1] sysvec_apic_timer_interrupt+0x8e/0xc0 [ 2314.708285][ C1] [ 2314.711203][ C1] [ 2314.714115][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2314.720079][ C1] RIP: 0010:__local_bh_enable_ip+0xa8/0x120 [ 2314.725958][ C1] Code: 1d 5d 04 bc 7e 65 8b 05 56 04 bc 7e a9 00 ff ff 00 74 45 bf 01 00 00 00 e8 75 41 09 00 e8 60 88 37 00 fb 65 8b 05 38 04 bc 7e <85> c0 74 58 5b 5d c3 65 8b 05 86 0b bc 7e 85 c0 75 a2 0f 0b eb 9e [ 2314.745546][ C1] RSP: 0018:ffffc900046b7830 EFLAGS: 00000206 [ 2314.751593][ C1] RAX: 0000000000000201 RBX: 00000000fffffe00 RCX: 1ffffffff20042be [ 2314.759545][ C1] RDX: 0000000000000000 RSI: 0000000000000201 RDI: 0000000000000000 [ 2314.767845][ C1] RBP: ffffffff88e8e885 R08: 0000000000000001 R09: ffffffff8ffc3a3f [ 2314.775799][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000100 [ 2314.783754][ C1] R13: ffff88807d93aa18 R14: 000000000000033d R15: dffffc0000000000 [ 2314.791708][ C1] ? batadv_tt_local_purge+0x285/0x370 [ 2314.797213][ C1] batadv_tt_local_purge+0x285/0x370 [ 2314.802486][ C1] batadv_tt_local_resize_to_mtu+0x8e/0x130 [ 2314.808380][ C1] batadv_hard_if_event+0x67d/0x1610 [ 2314.813661][ C1] ? smc_pnet_netdev_event+0x78/0xbd0 [ 2314.819046][ C1] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2314.825273][ C1] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2314.831501][ C1] notifier_call_chain+0xb5/0x200 [ 2314.836532][ C1] call_netdevice_notifiers_info+0xb5/0x130 [ 2314.842434][ C1] dev_set_mtu_ext+0x39d/0x5b0 [ 2314.847201][ C1] ? dev_validate_mtu+0x190/0x190 [ 2314.852210][ C1] ? __mutex_lock+0xf41/0x12f0 [ 2314.856974][ C1] dev_set_mtu+0x8e/0x120 [ 2314.861285][ C1] ? dev_set_mtu_ext+0x5b0/0x5b0 [ 2314.866222][ C1] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2314.872451][ C1] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2314.878674][ C1] ? netdev_name_node_lookup+0x108/0x150 [ 2314.884287][ C1] dev_ifsioc+0xb87/0x1120 [ 2314.888710][ C1] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 2314.894672][ C1] ? dev_load+0x79/0x200 [ 2314.898897][ C1] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2314.905122][ C1] ? full_name_hash+0x11d/0x170 [ 2314.909958][ C1] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2314.916184][ C1] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 2314.922148][ C1] dev_ioctl+0x1b9/0xed0 [ 2314.926377][ C1] sock_do_ioctl+0x15a/0x230 [ 2314.930962][ C1] ? put_user_ifreq+0x140/0x140 [ 2314.935807][ C1] ? selinux_file_ioctl+0x424/0x5d0 [ 2314.940999][ C1] ? selinux_file_ioctl+0x10f/0x5d0 [ 2314.946192][ C1] sock_ioctl+0x2f1/0x640 [ 2314.950507][ C1] ? br_ioctl_call+0xa0/0xa0 [ 2314.955081][ C1] ? __fget_files+0x28c/0x470 [ 2314.959759][ C1] ? security_file_ioctl+0x5c/0xb0 [ 2314.964868][ C1] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2314.971111][ C1] ? br_ioctl_call+0xa0/0xa0 [ 2314.975690][ C1] __x64_sys_ioctl+0x193/0x200 [ 2314.980439][ C1] do_syscall_64+0x35/0xb0 [ 2314.984843][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2314.990726][ C1] RIP: 0033:0x7f709d80a059 [ 2314.995130][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2315.014722][ C1] RSP: 002b:00007f709c17f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2315.023115][ C1] RAX: ffffffffffffffda RBX: 00007f709d91cf60 RCX: 00007f709d80a059 [ 2315.031065][ C1] RDX: 00000000200000c0 RSI: 0000000000008922 RDI: 0000000000000003 [ 2315.039017][ C1] RBP: 00007f709d86408d R08: 0000000000000000 R09: 0000000000000000 [ 2315.046966][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2315.054915][ C1] R13: 00007fffa5ba5b5f R14: 00007f709c17f300 R15: 0000000000022000 [ 2315.062869][ C1] [ 2315.065957][ C1] vkms_vblank_simulate: vblank timer overrun [ 2315.073434][T22814] net_ratelimit: 2097 callbacks suppressed [ 2315.073452][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2315.092121][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2315.104963][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2315.117690][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2315.130289][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2315.143033][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2315.155761][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2315.168502][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2315.180996][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2315.193796][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2320.074714][T22814] net_ratelimit: 2189 callbacks suppressed [ 2320.074737][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2320.093119][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2320.105491][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2320.118227][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2320.130952][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2320.142492][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2320.155198][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2320.167950][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2320.179648][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100) [ 2320.192391][T22814] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (100)